September 2014 - Core-sysadmins - mailman3.cels.anl.gov

Where's Max?
by Adam (Max) Trefonides 02 Oct '14

02 Oct '14

October 9th -- Vacation day -- Adam Max Trefonides CELS Systems maxadam(a)anl.gov

1 1

Seminar Announcement: The Assembly and Management of Scalable Computational Experiments
by Ninfa Mayorga 02 Oct '14

02 Oct '14

Computation Institute Presentation Speaker: Justin Wozniak, Mathematics and Computer Science Division, Argonne National Laboratory Host: Ian Foster Date: July 31, 2014 Time: 12:30 PM - 1:30 PM Location: Argonne National Lab, TCS Building 240, Room 5172, broadcast via Adobe Connect (see below) The Assembly and Management of Scalable Computational Experiments A large-scale, collaborative computational experiment involves more than the tuning of individual code fragments- typically, codes must be assembled, integrated in one or more programming models and languages, experimental runs must be managed and data collected. In this talk, I will present my work using the Swift programming language to assemble and run many different scientific applications on wide range of computer systems. In high-performance computing, I will present the Swift/T system for high performance dataflow applications that run on extremely large systems such as the IBM Blue Gene/P and the Cray Blue Waters system. The techniques presented will cover runtime and compiler development in the Swift context, management of big data for large scale computational experiments, and a variety of application case studies. Information: Lunch will be provided This talk will be broadcast to the University of Chicago, Searle 240A, 5735 S. Ellis Ave. You may join the broadcast from your location by using Adobe Connect. To join the meeting: http://anl.adobeconnect.com/tcs-ci -Enter as a guest If you have never attended an Adobe Connect meeting before: Test your connection: http://anl.adobeconnect.com/common/help/en/support/meeting_test.htm Get a quick overview:http://www.adobe.com/go/connectpro_overview

1 11

[SECURITY] [DSA 3040-1] rsyslog security update
by Luciano Bello 30 Sep '14

30 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3040-1 security(a)debian.org http://www.debian.org/security/ September 30, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : rsyslog CVE ID : CVE-2014-3634 Rainer Gerhards, the rsyslog project leader, reported a vulnerability in Rsyslog, a system for log processing. As a consequence of this vulnerability an attacker can send malformed messages to a server, if this one accepts data from untrusted sources, and trigger a denial of service attack. For the stable distribution (wheezy), this problem has been fixed in version 5.8.11-3+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 8.4.1-1. We recommend that you upgrade your rsyslog packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce(a)lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJUKxzwAAoJEG7C3vaP/jd0FCAP/j3PkBtRiX5Xfu9Y5AUh80dG I8z2KZb51G3pBh5MKB1jn4W4jafhIK++kJ9bqSmtlUiHtnhj78ylP7TMfzTmACQd s+GeTHh5nDfaSN8Tyaw0uf6n6SmaH+/sj6BBR6esXdFqvED2r1MMy5GD4OaYRMvd I9FdaCZeoytuJMj5PwdF5cxSFlgWWaymD/xINkAA+z0kXCYmZE+aYbsyN5GKB0ta 9whD4GQZxsMTrjj28vj+cO++OjTSVj+xr67H4eNe8qNcxPTNeBC82s3RK4REKTZX FLu6bMXtdBFibiq7+tQGoQl1YOAenox5Yb3LpKnBa2fIgouZ/gs1fOTb5v13cNAU 6up+s9X/JW4MU2bDV3TC/jry9hKQI3nBjIOYobKlX8DAxhWJEIRKm8HCbotsktKj /kdzaUNqgQ3vSQBidbQSty2h7IlC0GhG+QR91HFqq5qUcKbggf5tNGNU86HT3zvD vfYAiNroN14mxDwEwbUnrZ7E4BSZxjr7xIv5N1a80FdGV/C0gyotKlK7Lx5GapM0 bZyRHUloO885kURlzzm5fxe9vRTtD5iF/w2NNsRhZCo1VFEvlf3UMrVW64atGMjH sDFZcclV6lALmOSGWGF7l/EWUM3UQ/wKyxTZTiK6gZ+SlZpZTlGQ19hUlqc1az+T dl/U/APBaNQKLLX45CXZ =aQBZ -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-security-announce-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: https://lists.debian.org/5246853.CWT6qH7yIR@box

1 0

Cron <root@newnewman-1> /root/bin/create-mailbox-list.sh force
by root＠mcs.anl.gov 30 Sep '14

30 Sep '14

Automatically installing changes noted below. -buntinas(a)mcs.anl.gov OK

1 0

DNS
by Leggett, Torrance I. 30 Sep '14

30 Sep '14

These zones will be transferred to CIS to master tonight around 5:00, so if you have to make any changes you'll need to do it in both IHW and hostbase: First transition master of these to CIS: 172.5.192.in-addr.arpa,1,1,1 186.5.192.in-addr.arpa,1,1,1 196.5.192.in-addr.arpa,1,1,1 197.5.192.in-addr.arpa,1,1,1 198.5.192.in-addr.arpa,1,1,1 199.5.192.in-addr.arpa,1,1,1 200.5.192.in-addr.arpa,1,1,1 96.114.74.in-addr.arpa,1,1,1 bgconsortium.org,1,1,1 ci.anl.gov,1,1,1 cimearth.com,1,1,1 cimearth.org,1,1,1 cim-earth.com,1,1,1 cim-earth.org,1,1,1 cogkit.org,1,1,1 earthmicrobiome.org,1,1,1 i2u2.org,1,1,1 icis.anl.gov,1,1,1 kbase-group.org,1,1,1 lcrc.anl.gov,1,1,1 magellancloud.com,1,1,1 magellancloud.org,1,1,1 magellancloud.net,1,1,1 metagenomics.anl.gov,1,1,1 mobedac.org,1,1,1 nmpdr.org,1,1,1 rnaseq-rast.anl.gov,1,1,1 scidacreview.org,1,1,1 terragenome.org,1,1,1 theseed.org,1,1,1

1 0

Undelivered Mail Returned to Sender
by MAILER-DAEMON＠mcs.anl.gov 30 Sep '14

30 Sep '14

This is the mail system at host mailrelay.mcs.anl.gov. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <clpgulnxn(a)site.com>: host crsmail.ultradns.net[204.74.99.102] said: 550 5.1.1 <clpgulnxn(a)site.com>: Recipient address rejected: User unknown in virtual alias table (in reply to RCPT TO command)

1 0

[RHSA-2014:1340-01] Low: Red Hat Enterprise Linux 5.9 Extended Update Support 6-Month Notice
by bugzilla＠redhat.com 30 Sep '14

30 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Low: Red Hat Enterprise Linux 5.9 Extended Update Support 6-Month Notice Advisory ID: RHSA-2014:1340-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2014-1340.html Issue date: 2014-09-30 ===================================================================== 1. Summary: This is the 6-Month notification for the retirement of Red Hat Enterprise Linux 5.9 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support channel for Red Hat Enterprise Linux 5.9. 2. Relevant releases/architectures: Red Hat Enterprise Linux EUS (v. 5.9 server) - i386, ia64, ppc, s390x, x86_64 3. Description: In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support (EUS) for Red Hat Enterprise Linux 5.9 will be retired as of March 31, 2015, and support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical impact security patches or urgent priority bug fixes, for Red Hat Enterprise Linux 5.9 EUS after March 31, 2015. In addition, technical support through Red Hat's Global Support Services will no longer be provided after this date. We encourage customers to plan their migration from Red Hat Enterprise Linux 5.9 to a more recent version of Red Hat Enterprise Linux. As a benefit of the Red Hat subscription model, customers can use their active subscriptions to entitle any system on any currently supported Red Hat Enterprise Linux release. Details of the Red Hat Enterprise Linux life cycle can be found here: https://access.redhat.com/support/policy/updates/errata/ 4. Solution: This erratum contains an updated redhat-release package that provides a copy of this retirement notice in the "/usr/share/doc/" directory. 5. Package List: Red Hat Enterprise Linux EUS (v. 5.9 server): Source: redhat-release-5Server-5.9.0.3.src.rpm i386: redhat-release-5Server-5.9.0.3.i386.rpm ia64: redhat-release-5Server-5.9.0.3.ia64.rpm ppc: redhat-release-5Server-5.9.0.3.ppc.rpm s390x: redhat-release-5Server-5.9.0.3.s390x.rpm x86_64: redhat-release-5Server-5.9.0.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 6. References: https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/support/policy/updates/errata/ 7. Contact: The Red Hat security contact is <secalert(a)redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUKvOgXlSAg2UNWIIRAs1PAJ0dDkBlPCXngrQbZLYWFC3eScpPCQCgw4dz pmbmNzbCdGJzmOj+o/VCl4I= =7955 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce(a)redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

1 0

[RHSA-2014:1339-01] Low: openstack-neutron security and bug fix update
by bugzilla＠redhat.com 30 Sep '14

30 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Low: openstack-neutron security and bug fix update Advisory ID: RHSA-2014:1339-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://rhn.redhat.com/errata/RHSA-2014-1339.html Issue date: 2014-09-30 CVE Names: CVE-2014-3632 ===================================================================== 1. Summary: Updated openstack-neutron packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6 - noarch 3. Description: OpenStack Networking (neutron) is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main function is to manage connectivity to and from virtual machines. As of Red Hat Enterprise Linux OpenStack Platform 4.0, 'neutron' replaces 'quantum' as the core component of OpenStack Networking. It was discovered that the openstack-neutron package in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6 was released with a sudoers file containing a configuration error. This error caused OpenStack Networking to be vulnerable to the CVE-2013-6433 issue. (CVE-2014-3632) This update also fixes the following bugs: * Prior to this update, the Open vSwitch agent failed to process ports on the integration bridge that quickly disappeared and reappeared during the processing loop. When such a failure occurred, the processing of the port was aborted (which is the correct behavior), but it was also marked as processed, meaning that the next updates for the port were not applied when it reappeared later. As a consequence, some ports were not VLAN-tagged correctly, and that resulted in no network connectivity for those instances that were bound to those ports. With this update, ports that are not on the integration bridge are still not processed but also not marked as such. Ports that disappear and then reappear later on the integration bridge are processed correctly, and VLAN tag updates are properly applied. (BZ#1123053) * This update fixes an issue that caused connectivity to be dropped when restarting the openvswitch service with l2pop enabled. (BZ#1120719) * Due to an incorrect version of the python-httplib2 package specified in the spec file, when a large amount of virtual machines (VMs) was launched, some of the VMs could be assigned two private IP addresses. (BZ#1126451) All openstack-neutron users are advised to upgrade to these updated packages, which correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/) 1126451 - VMs get 2 private IPs during launching of a large amount of VMs 1128194 - LBaaS extension doesn't register it's resources to quota engine 1140949 - CVE-2014-3632 openstack-neutron: regression of fix for CVE-2013-6433 6. Package List: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6: Source: openstack-neutron-2014.1.2-4.el6ost.src.rpm noarch: openstack-neutron-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-bigswitch-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-brocade-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-cisco-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-hyperv-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-ibm-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-linuxbridge-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-mellanox-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-metaplugin-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-metering-agent-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-midonet-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-ml2-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-nec-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-ofagent-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-oneconvergence-nvsd-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-openvswitch-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-plumgrid-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-ryu-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-vmware-2014.1.2-4.el6ost.noarch.rpm openstack-neutron-vpn-agent-2014.1.2-4.el6ost.noarch.rpm python-neutron-2014.1.2-4.el6ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2014-3632.html https://access.redhat.com/security/updates/classification/#low 8. Contact: The Red Hat security contact is <secalert(a)redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUKvOIXlSAg2UNWIIRAoOLAJ4njqIbA+IZAUJm5GkNNi5UppS+nACfYg7k UWqQ9pi+JnKRQ0oSI2F5dGU= =T8WI -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce(a)redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

1 0

[USN-2366-1] libvirt vulnerabilities
by Marc Deslauriers 30 Sep '14

30 Sep '14

========================================================================== Ubuntu Security Notice USN-2366-1 September 30, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: Several security issues were fixed in libvirt. Software Description: - libvirt: Libvirt virtualization toolkit Details: Daniel P. Berrange and Richard Jones discovered that libvirt incorrectly handled XML documents containing XML external entity declarations. An attacker could use this issue to cause libvirtd to crash, resulting in a denial of service on all affected releases, or possibly read arbitrary files if fine grained access control was enabled on Ubuntu 14.04 LTS. (CVE-2014-0179, CVE-2014-5177) Luyao Huang discovered that libvirt incorrectly handled certain blkiotune queries. An attacker could use this issue to cause libvirtd to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-3633) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: libvirt-bin 1.2.2-0ubuntu13.1.5 libvirt0 1.2.2-0ubuntu13.1.5 Ubuntu 12.04 LTS: libvirt-bin 0.9.8-2ubuntu17.20 libvirt0 0.9.8-2ubuntu17.20 Ubuntu 10.04 LTS: libvirt-bin 0.7.5-5ubuntu27.25 libvirt0 0.7.5-5ubuntu27.25 After a standard system update you need to reboot your computer to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-2366-1 CVE-2014-0179, CVE-2014-3633, CVE-2014-5177 Package Information: https://launchpad.net/ubuntu/+source/libvirt/1.2.2-0ubuntu13.1.5 https://launchpad.net/ubuntu/+source/libvirt/0.9.8-2ubuntu17.20 https://launchpad.net/ubuntu/+source/libvirt/0.7.5-5ubuntu27.25 -- ubuntu-security-announce mailing list ubuntu-security-announce(a)lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

1 0

[RHSA-2014:1338-01] Moderate: openstack-glance security and bug fix update
by bugzilla＠redhat.com 30 Sep '14

30 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: openstack-glance security and bug fix update Advisory ID: RHSA-2014:1338-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://rhn.redhat.com/errata/RHSA-2014-1338.html Issue date: 2014-09-30 CVE Names: CVE-2014-5356 ===================================================================== 1. Summary: Updated openstack-glance packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6 - noarch 3. Description: OpenStack Image service (glance) provides discovery, registration, and delivery services for disk and server images. It provides the ability to copy or snapshot a server image, and immediately store it away. Stored images can be used as a template to get new servers up and running quickly and more consistently than installing a server operating system and individually configuring additional services. It was discovered that the image_size_cap configuration option in glance was not honored. An authenticated user could use this flaw to upload an image to glance and consume all available storage space, resulting in a denial of service. (CVE-2014-5356) This update also fixes the following bugs: * Whenever the 'x-image-meta-store' header was passed to glance-api, the service would check whether the value was a valid store instead of a valid scheme. However, the rest of the store library uses the scheme to identify the store that should be used; this prevented the use of this feature. Glance now verifies that the value of 'x-image-meta-store' is a valid scheme instead of a valid store name. (BZ#1134249) * With this update, Image Service (glance) is now dependent on oslo.vmware in order to support the optional VMware store. This hard dependency was created due to the likelihood that the dependencies are already installed and due to the diminutive size of the package. As a result, the user experience is improved by no longer requiring a manual oslo.vmware install. (BZ#1125876) * Previously, the process of upgrading from Red Hat Enterprise Linux OpenStack Platform 4 to 5 may have failed. (BZ#1139243) All openstack-glance users are advised to upgrade to these updated packages, which correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/) 1125876 - openstack-glance should depend on python-oslo-vmware 1131770 - CVE-2014-5356 openstack-glance: Glance store disk space exhaustion 1134249 - Glance `--store` checks on store name instead of scheme 1139243 - RHOS4->RHOS5 upgrade fails due to wrong version of python-migrate installed 6. Package List: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6: Source: openstack-glance-2014.1.2-5.el6ost.src.rpm noarch: openstack-glance-2014.1.2-5.el6ost.noarch.rpm openstack-glance-doc-2014.1.2-5.el6ost.noarch.rpm python-glance-2014.1.2-5.el6ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2014-5356.html https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert(a)redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUKvN2XlSAg2UNWIIRAvgFAKCz4cH/TJ6u6vohgCo+k50IJxpxHgCcDRa/ c8LvslgMVUUm5u0msVATU24= =m9TY -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce(a)redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

1 0