[release-announce] [nova] nova 14.0.10 (newton)
no-reply at openstack.org
no-reply at openstack.org
Thu Nov 16 20:10:44 UTC 2017
We are ecstatic to announce the release of:
nova 14.0.10: Cloud computing fabric controller
This release is part of the newton release series.
Download the package from:
https://tarballs.openstack.org/nova/
For more details, please see below.
14.0.10
^^^^^^^
Security Issues
* OSSA-2017-005: Nova Filter Scheduler bypass through rebuild action
By rebuilding an instance, an authenticated user may be able to
circumvent the FilterScheduler bypassing imposed filters (for
example, the ImagePropertiesFilter or the IsolatedHostsFilter). All
setups using the FilterScheduler (or CachingScheduler) are affected.
The fix is in the *nova-api* and *nova-conductor* services.
(https://security.openstack.org/ossa/OSSA-2017-005.html)
Changes in nova 14.0.9..14.0.10
-------------------------------
698b261 Add security release note for OSSA-2017-005
97a51d9 Validate new image via scheduler during rebuild
d7ac5d9 Fix non-parameterized service id in hypervisors sample tests
6ce8bca Pass requested_destination in filter_properties
6b7b4aa Set group_members when converting to legacy request spec
86ea9b8 Correct log message when removing a security group
3209410 Functional regression test for evacuate with a target
Diffstat (except docs and test files)
-------------------------------------
nova/compute/api.py | 17 ++-
nova/conductor/manager.py | 6 +-
nova/network/security_group/neutron_driver.py | 4 +-
nova/objects/request_spec.py | 10 +-
.../hypervisors-detail-resp.json.tpl | 2 +-
.../os-hypervisors/hypervisors-show-resp.json.tpl | 2 +-
.../v2.28/hypervisors-detail-resp.json.tpl | 2 +-
.../v2.28/hypervisors-show-resp.json.tpl | 2 +-
.../functional/regressions/test_bug_1702454.py | 155 +++++++++++++++++++++
.../functional/regressions/test_bug_1719730.py | 125 +++++++++++++++++
...31-validate-image-rebuild-9c5b05a001c94a4d.yaml | 13 ++
18 files changed, 498 insertions(+), 20 deletions(-)
More information about the Release-announce
mailing list