| 2017-01-24 13:00:05 |
Alexey Shtokolov |
bug |
|
|
added bug |
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
nominated for series |
|
fuel/mitaka |
|
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
bug task added |
|
fuel/mitaka |
|
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
nominated for series |
|
fuel/newton |
|
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
bug task added |
|
fuel/newton |
|
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
nominated for series |
|
fuel/ocata |
|
| 2017-01-24 13:00:45 |
Alexey Shtokolov |
bug task added |
|
fuel/ocata |
|
| 2017-01-24 13:00:51 |
Alexey Shtokolov |
fuel/newton: importance |
Undecided |
Critical |
|
| 2017-01-24 13:00:54 |
Alexey Shtokolov |
fuel/mitaka: importance |
Undecided |
Critical |
|
| 2017-01-24 13:01:02 |
Alexey Shtokolov |
fuel/mitaka: milestone |
|
9.2 |
|
| 2017-01-24 13:01:06 |
Alexey Shtokolov |
fuel/ocata: milestone |
9.2 |
11.0 |
|
| 2017-01-24 13:01:08 |
Alexey Shtokolov |
fuel/newton: milestone |
|
10.1 |
|
| 2017-01-24 13:01:12 |
Alexey Shtokolov |
fuel/mitaka: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
| 2017-01-24 13:01:20 |
Alexey Shtokolov |
fuel/newton: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
| 2017-01-24 13:01:25 |
Alexey Shtokolov |
fuel/ocata: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
| 2017-01-24 13:05:21 |
OpenStack Infra |
fuel: status |
New |
In Progress |
|
| 2017-01-24 13:05:21 |
OpenStack Infra |
fuel: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Vladimir Kuklin (vkuklin) |
|
| 2017-01-24 13:05:37 |
OpenStack Infra |
fuel/mitaka: status |
New |
In Progress |
|
| 2017-01-24 13:05:37 |
OpenStack Infra |
fuel/mitaka: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Vladimir Kuklin (vkuklin) |
|
| 2017-01-24 13:07:32 |
Vladimir Kozhukalov |
description |
MOS 9.1 and 9.2 contain the fix https://review.openstack.org/#/c/362840/ for the security bug https://review.openstack.org/#/c/362840/. This fix sets APT::Get::AllowUnauthenticated 0 and prohibits packages installation from unsigned repos.
Local mirrors created via plugins or fuel-mirror (fuel-createmirror) utility are not signed.
Steps to reproduce:
1. Install Master node
2. Create a local repo using fuel-mirror or Install plugins with local repos.
3. Deploy
Expected result: Fuel installs packages from local mirrors
Actual result: Packages from local mirrors cannot be authenticated and are not installed. |
MOS 9.1 and 9.2 contain the fix https://review.openstack.org/#/c/362840/ for the security bug https://bugs.launchpad.net/fuel/+bug/1594699. This fix sets APT::Get::AllowUnauthenticated 0 and prohibits packages installation from unsigned repos.
Local mirrors created via plugins or fuel-mirror (fuel-createmirror) utility are not signed.
Steps to reproduce:
1. Install Master node
2. Create a local repo using fuel-mirror or Install plugins with local repos.
3. Deploy
Expected result: Fuel installs packages from local mirrors
Actual result: Packages from local mirrors cannot be authenticated and are not installed. |
|
| 2017-01-24 13:40:33 |
Sergey Philippov |
bug |
|
|
added subscriber Sergey Philippov |
| 2017-01-24 16:16:17 |
Alexey Shtokolov |
fuel/mitaka: status |
In Progress |
Invalid |
|
| 2017-01-24 16:16:31 |
Alexey Shtokolov |
fuel/newton: status |
New |
Invalid |
|
| 2017-01-24 16:16:34 |
Alexey Shtokolov |
fuel/ocata: status |
In Progress |
Invalid |
|
| 2017-03-01 15:27:23 |
OpenStack Infra |
fuel: status |
Invalid |
In Progress |
|
| 2017-04-28 20:31:03 |
OpenStack Infra |
fuel/mitaka: status |
Invalid |
In Progress |
|
| 2017-04-28 20:31:03 |
OpenStack Infra |
fuel/mitaka: assignee |
Vladimir Kuklin (vkuklin) |
Sergii Golovatiuk (sgolovatiuk) |
|
| 2020-07-29 22:23:48 |
Sergii Golovatiuk |
fuel/mitaka: assignee |
Sergii Golovatiuk (sgolovatiuk) |
|
|
