Open Stack

Daniel P. Berrange wrote:
> Was this driver present in the Grizzly release ? If so, then this fix
> would merit a CVE if someone can identify a way to exploit the flawed
> command checking in current code.

The use cases were analyzed in
https://bugs.launchpad.net/nova/+bug/1192971 and none of them were found
exploitable. The code is being fixed as a strengthening measure (esp.
for future calls), not as a vulnerability fix.

-- 
Thierry Carrez (ttx)