We are ecstatic to announce the release of: nova 12.0.5: Cloud computing fabric controller This release is part of the liberty stable release series. For more details, please see below. 12.0.5 ^^^^^^ Security Issues * The qemu-img tool now has resource limits applied which prevent it from using more than 1GB of address space or more than 2 seconds of CPU time. This provides protection against denial of service attacks from maliciously crafted or corrupted disk images. oslo.concurrency>=2.6.1 is required for this fix. Changes in nova 12.0.4..12.0.5 ------------------------------ 6bc37dc virt: set address space & CPU time limits when running qemu-img 15cfd03 Refresh info_cache after deleting floating IP bedee79 Updated from global requirements 9ab10b8 Fix booting fail when unlimited project quota 53fffe0 Update instance host in post live migration even when exception occurs 3e1a0db Updated from global requirements 0e1bb7e Fix duplicate lines in policy.json Diffstat (except docs and test files) ------------------------------------- etc/nova/policy.json | 3 - nova/compute/manager.py | 40 ++++--- nova/db/sqlalchemy/api.py | 11 +- nova/network/neutronv2/api.py | 14 ++- nova/virt/images.py | 16 ++- .../apply-limits-to-qemu-img-8813f7a333ebdf69.yaml | 8 ++ requirements.txt | 4 +- test-requirements.txt | 2 +- 15 files changed, 242 insertions(+), 126 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 050091e..c1fd413 100644 --- a/requirements.txt +++ b/requirements.txt @@ -35 +35 @@ stevedore>=1.5.0 # Apache-2.0 -setuptools>=16.0 +setuptools!=24.0.0,>=16.0 @@ -54 +54 @@ alembic>=0.8.0 -os-brick>=0.4.0 # Apache-2.0 +os-brick!=1.4.0,>=0.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 074337d..4e33195 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ psycopg2>=2.5 -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License