[USN-1851-1] python-keystoneclient vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=TZUG
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1851-1
June 03, 2013

python-keystoneclient vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.04

Summary:

The python client library for Keystone did not properly verify expired PKI
tokens.

Software Description:
- python-keystoneclient: Client library for OpenStack Identity API

Details:

Eoghan Glynn and Alex Meade discovered that python-keystoneclient did not
properly perform expiry checks for the PKI tokens used in Keystone. If
Keystone were setup to use PKI tokens (the default in Ubuntu 13.04), a
previously authenticated user could continue to use a PKI token for longer
than intended.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
python-keystoneclient 1:0.2.3-0ubuntu2.2

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1851-1
CVE-2013-2104

Package Information:

https://launchpad.net/ubuntu/+source/python-keystoneclient/1:0.2.3-0ubuntu2.2