[Rdo-list] [package announce] openstack-nova security update

Pádraig Brady pbrady at redhat.com
Thu Dec 5 16:45:44 UTC 2013


Grizzly and Havana RDO openstack-nova packages have been updated to
openstack-nova-2013.1.4-4 and openstack-nova-2013.2-5 respectively.

- Fix compute host disk space DoS when booting oversized images
    https://access.redhat.com/security/cve/CVE-2013-2096
    https://access.redhat.com/security/cve/CVE-2013-4463

Other changes included in these respective versions are:

openstack-nova-2013.1.4-4
- remove the -s option on qemu-img convert
    http://bugzilla.redhat.com/1016896

openstack-nova-2013.2-5
- Remove cert and scheduler hard dependency on cinderclient
    http://bugzilla.redhat.com/1031679
- Require ipmitool for baremetal driver
    http://bugzilla.redhat.com/1022243




More information about the dev mailing list