[Rdo-list] [package announce] openstack-nova security update
Pádraig Brady
pbrady at redhat.com
Thu Dec 5 16:45:44 UTC 2013
Grizzly and Havana RDO openstack-nova packages have been updated to
openstack-nova-2013.1.4-4 and openstack-nova-2013.2-5 respectively.
- Fix compute host disk space DoS when booting oversized images
https://access.redhat.com/security/cve/CVE-2013-2096
https://access.redhat.com/security/cve/CVE-2013-4463
Other changes included in these respective versions are:
openstack-nova-2013.1.4-4
- remove the -s option on qemu-img convert
http://bugzilla.redhat.com/1016896
openstack-nova-2013.2-5
- Remove cert and scheduler hard dependency on cinderclient
http://bugzilla.redhat.com/1031679
- Require ipmitool for baremetal driver
http://bugzilla.redhat.com/1022243
More information about the dev
mailing list