[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.4-4.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-11892
2014-10-01 03:26:25
--------------------------------------------------------------------------------

Name        : openstack-neutron
Product     : Fedora 20
Version     : 2013.2.4
Release     : 4.fc20
URL         : http://launchpad.net/neutron/
Summary     : OpenStack Networking Service
Description :
Neutron is a virtual network service for Openstack. Just like
OpenStack Nova provides an API to dynamically request and configure
virtual servers, Neutron provides an API to dynamically request and
configure virtual networks. These networks connect "interfaces" from
other OpenStack services (e.g., virtual NICs from Nova VMs). The
Neutron API supports extensions to provide advanced network
capabilities (e.g., QoS, ACLs, network monitoring, etc.)

--------------------------------------------------------------------------------
Update Information:

force_gateway_on_subnet=True in neutron-dist.conf
CVE fixed
Rebased Neutron for the last upstream Havana release (2013.2.4).
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 29 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.4-4
- enforce force_gateway_on_subnet=True in neutron-dist.conf, rhbz#1090553
* Thu Sep 25 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.4-3
- Forbid regular users to reset admin-only attrs to default values, rhbz#1142013
* Mon Sep 22 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.4-2
- Merged in el6-havana branch, resolving conflicts between platforms
  with if-else conditionals. This is needed because el6-havana was
  (erroneously) locked when locking el6 branch.
* Mon Sep 22 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.4-1
- Update to upstream 2013.2.4
* Wed Jul 23 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-13
- no quota for allowed address pair, rhbz#1122428
* Wed Jul 16 2014 Miguel Ángel Ajo <majopela at redhat.com> 2013.2.3-12
- Moved all plugin sources to python-neutron to avoid breaking
  hidden upstream dependencies from agents to plugins, etc.
  fixes rhbz#1120146
- Removed the hyper-v agent exclude.
- Added a few LICENSE files to packages that missed it.
* Tue Jun 24 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-11
- Send SIGTERM signal only to parent process when stopping neutron
  service, bz#1110642
* Tue Jun 24 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-10
- Notify systemd when starting Neutron server, bz#1063427
* Tue Jun 17 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-9
- Install SNAT rules for ipv4 only, bz#1110142
* Wed Jun 11 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-8
- Ensure routing key is specified in the address for a direct producer, bz#1108025
* Mon May 19 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-7
- netaddr<=0.7.10 raises ValueError instead of AddrFormatError, bz#1090137
* Mon May 19 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-6
- Validate CIDR given as ip-prefix in security-group-rule-create, bz#1090137
* Thu May 15 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-5
- Make neutron-vpn-agent read fwaas_driver.ini, bz#1098121
* Mon Apr 28 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-4
- Removed signing_dir from neutron.conf (bz#1050842)
- Sync service and systemd modules from oslo-incubator (bz#1063427)
* Thu Apr 10 2014 Ihar Hrachyshka <ihrachys at redhat.com> 2013.2.3-2
- Remove signing_dir from neutron-dist.conf, bz#1050842
* Thu Apr 10 2014 Miguel Angel Ajo <mangelajo at redhat.com> 2013.2.3-1
- Update to upstream 2013.2.3
* Wed Feb 19 2014 Pádraig Brady <pbrady at redhat.com> - 2013.2.2-2
- Update to havana stable release 2013.2.2
- Sync up Quantum renaming changes from el6 branch
* Fri Jan 24 2014 Terry Wilson <twilson at redhat.com> - 2013.2.1-3
- Remove requirements.txt, bz#1057615
* Tue Jan  7 2014 Terry Wilson <twilson at redhat.com> - 2013.2.1-1
- Add python-psutil requirement for openvswitch agent, bz#1049235
* Wed Dec 18 2013 Pádraig Brady <pbrady at redhat.com> - 2013.2.1-1
- Update to havana stable release 2013.2.1
* Tue Dec 10 2013 Terry Wilson <twilson at redhat.com> - 2013.2-6
- Add rootwrap.conf limitation to sudoers.d/neutron, bz#984097
- neutron-server-setup: support mariadb
* Wed Dec  4 2013 Terry Wilson <twilson at redhat.com> - 2013.2-5
- Add missing debug and vpnaas rootwrap filters, bz#1034207
* Mon Dec  2 2013 Terry Wilson <twilson at redhat.com> - 2013.2-4
- Replace quantum references in neutron-dist.conf
* Wed Nov 13 2013 Terry Wilson <twilson at redhat.com> - 2013.2-3
- Add dnsmasq-utils dependency
* Wed Oct 30 2013 Terry Wilson <twilson at redaht.com> - 2013.2-2
- Better support for upgrading from grizzly to havana
- Update dependencies on python-{babel,keystoneclient,oslo-config}
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1142012 - CVE-2014-6414 openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users
        https://bugzilla.redhat.com/show_bug.cgi?id=1142012
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update openstack-neutron' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------