From aec5619dd405517abaa503f8af892f22088130d8 Mon Sep 17 00:00:00 2001 From: Sebastian Marcet <smarcet@gmail.com> Date: Tue, 1 Mar 2016 20:36:18 -0300 Subject: [PATCH] OpenstackId relase 1.0.13 Security fix Blowfish password hash checking This issue affect to all users with passwordEncryption= 'blowfish' the code was only doing the hash comparision using only the first 10 chars and not the whole hash string Change-Id: I3382488baf221bc2d9337152e344c5ca312af42b --- modules/openstack_project/manifests/openstackid_prod.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/openstack_project/manifests/openstackid_prod.pp b/modules/openstack_project/manifests/openstackid_prod.pp index b423cae279..4ffd2d552a 100644 --- a/modules/openstack_project/manifests/openstackid_prod.pp +++ b/modules/openstack_project/manifests/openstackid_prod.pp @@ -39,7 +39,7 @@ class openstack_project::openstackid_prod ( $ssl_cert_file_contents = '', $ssl_key_file_contents = '', $ssl_chain_file_contents = '', - $release = '1.0.12', + $release = '1.0.13', $app_url = '', $app_key = '', ) {