[Rdo-list] Announce: All 2014.1.2 updates now live

[Dafna Ron]

Hi Yaniv,

I encountered this when doing cinder upgrades and found the same 
reported by users on line:

https://ask.openstack.org/en/question/28335/you-should-rebuild-using-libgmp-5-to-avoid-timing-attack-vulnerability-_warnnot-using-mpz_powm_sec-you-should-rebuild-using-libgmp-5-to-avoid-timing/

There is a bug reported on this as well for this as well in bugzilla.

https://bugzilla.redhat.com/show_bug.cgi?id=1123339

adding Eric if tempest tests are braking on RDO.

Thanks!
Dafna


On 09/11/2014 03:55 PM, Kaul, Yaniv wrote:
>> -----Original Message-----
>> From: rdo-list-bounces at redhat.com [mailto:rdo-list-bounces at redhat.com] On
>> Behalf Of Rich Bowen
>> Sent: Thursday, September 11, 2014 4:34 PM
>> To: rdo-list at redhat.com
>> Subject: [Rdo-list] Announce: All 2014.1.2 updates now live
>>
>> Those of you who were waiting for the 2014.1.2 updates for EL6, they have
>> emerged successfully from the CI testing process, and are now available at
>> https://repos.fedorapeople.org/repos/openstack/openstack-icehouse/epel-
>> 6/?C=M;O=D
>>
>> As always, questions and concerns should come back to this list. We eagerly
>> anticipate your feedback on these packages.
>>
>> --Rich
> I wonder if it can explain the breakage in Tempest tests. I have not changed anything in my environment or deployment script, yet Tempest fails:
>
> /run_tempest.sh -N --serial 'tempest.api.volume*'
> /usr/lib64/python2.6/site-packages/Crypto/Util/number.py:57: PowmInsecureWarning: Not using mpz_powm_sec.  You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.
>    _warn("Not using mpz_powm_sec.  You should rebuild using libgmp >= 5 to avoid timing attack vulnerability.", PowmInsecureWarning)
> Non-zero exit code (2) from test listing.
>
> ----------------------------------------------------------------------
> Ran 0 tests in 5.070s
>
>
>
>> --
>> Rich Bowen - rbowen at redhat.com
>> OpenStack Community Liaison
>> http://openstack.redhat.com/
>>
>> _______________________________________________
>> Rdo-list mailing list
>> Rdo-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/rdo-list
> _______________________________________________
> Rdo-list mailing list
> Rdo-list at redhat.com
> https://www.redhat.com/mailman/listinfo/rdo-list


-- 
Dafna Ron