Open Stack

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/11/2015 12:21 PM, Alan Pevec wrote:
> Hi,
> 
> next Icehouse stable point release 2014.1.4 has been slipping last
> few weeks due to various gate issues, see "Recently closed" section
> in https://etherpad.openstack.org/p/stable-tracker for details. 
> Branch looks good enough now to push the release tomorrow
> (Thursdays are traditional release days) and I've put freeze -2s on
> the open reviews. I'm sorry about the short freeze period but
> branch was effectively frozen last two weeks due to gate issues and
> further delay doesn't make sense. Attached is the output from the
> stable_freeze script for thawing after tags are pushed.
> 
> At the same time I'd like to propose following freeze exceptions
> for the review by stable-maint-core:
> 
> * https://review.openstack.org/144714 - Eventlet green threads not 
> released back to pool Justification: while not OSSA fix, it does
> have SecurityImpact tag
> 
> * https://review.openstack.org/163035 - [OSSA 2015-005] Websocket 
> Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259) 
> Justification: pending merge on master and juno
> 

For OSSA patch, there seems to be some concerns and issues with the
patch that was developed under embargo. It seems it will take more
time than expected to merge it in master. It may mean we will actually
miss the backport for 2014.1.4.

/Ihar
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJVAXlsAAoJEC5aWaUY1u57Fa8IAOYzNnim6mivd+Ch8WjCWtZv
dsqjyYfD0RpNlYNG8yEn+ppKTEAOrZ7AmvqqFK8Rkpkq7vOodvNn28FCkC7/QAk6
TLXshUy+Ugnm2lNu7VqbY9BuurJIVHwXMeYWJ5/aUKrIwnaMeZnYZ6GG1kH325+k
UtTh/9Tg1adVcDAb5crA6nfOGWQUVSC+7E9sxTR1vjuFiHK9u9hnzbOpBcygg3t0
Ukfa4FZCcpf5pNqMEAT9Ue9iuvmLnPi2puts3gTDdM/KfMX1DQj9KBq8b8Klmi9z
euLM44vdjVdcyKrytRCuSOv/NmJ+WKuO69TrDdW1mA/So0xYSaCRanqE+n7IRUc=
=yBm2
-----END PGP SIGNATURE-----