-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-13038 2012-09-30 18:06:56 --------------------------------------------------------------------------------
Name : openstack-swift Product : Fedora EPEL 6 Version : 1.4.8 Release : 5.el6 URL : http://launchpad.net/swift Summary : OpenStack Object Storage (swift) Description : OpenStack Object Storage (swift) aggregates commodity servers to work together in clusters for reliable, redundant, and large-scale storage of static objects. Objects are written to multiple hardware devices in the data center, with the OpenStack software responsible for ensuring data replication and integrity across the cluster. Storage clusters can scale horizontally by adding new nodes, which are automatically configured. Should a node fail, OpenStack works to replicate its content from other active nodes. Because OpenStack uses software logic to ensure data replication and distribution across different devices, inexpensive commodity hard drives and servers can be used in lieu of more expensive equipment.
-------------------------------------------------------------------------------- Update Information:
Do not use pickle for serialization in memcache (CVE-2012-4406) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #856786 - CVE-2012-4406 Openstack-Swift: insecure use of python pickle() [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=856786 [ 2 ] Bug #807172 - Addition to openstack-swift packaging (man pages) https://bugzilla.redhat.com/show_bug.cgi?id=807172 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update openstack-swift' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------