-
nova (1:2013.2.3-0ubuntu1.2) saucy-security; urgency=medium
* SECURITY UPDATE: no change rebuild for security
- CVE-2013-4463 (LP: #1206081)
- CVE-2013-4469 (LP: #1206081)
- CVE-2013-7130 (LP: #1251590)
- CVE-2014-0134 (LP: #1221190)
- CVE-2014-0167 (LP: #1290537)
* SECURITY UPDATE: specify /etc/nova/rootwrap.conf for use with
nova-rootwrap
- CVE-2013-1068 (LP: #1185019)
-- Jamie Strandboge <email address hidden> Mon, 09 Jun 2014 09:29:12 -0500
-
nova (1:2013.2.3-0ubuntu1) saucy-proposed; urgency=medium
* Resynchronize with stable/havana (feedcb2) (LP: #1302575):
- [feedcb2] Fix 'icehouse-compat' processing for compute rpc
- [ecb058d] User a more accurate max_delay for reconnects
- [bdc7519] Pass thru credentials to allow re-authentication
- [25e761a] Persist image format to a file, to prevent attacks based on changing it
- [53acc09] Do not hide exception in update_instance_cache_with_nw_info
- [f44bdfe] handle empty network info in instance cache
- [00d1882] VMware: enable driver to work with postgres database
- [44c60c6] Grizzly to Havana Upgrade wipes out Nova quota_usages
- [2edf6ff] VMware: fix the VNC port allocation
- [4ac67d1] neutron_metadata_proxy_shared_secret should not be written to log file
- [590519a] Correct the state for PAUSED instances on reboot
- [d50fad8] VMWare: bug fix for Vim exception handling
- [c87a88f] Fix InstanceNotFound error in _delete_instance_files
- [374ff97] Fixed a problem in iSCSI multipath
- [5661055] VMware: fix bug for exceptions thrown in _wait_for_task
- [aa7f550] VMware: fix image snapshot with attached volume
- [06dd47f] Explicity teardown on error in libguestfs setup()
- [985b5aa] VMware: fix disk extend bug when no space on datastore
- [03f7ee0] Further harden boto version checking in EC2 tests
- [88da098] Take a vm out of SNAPSHOTTING after Glance error
- [6564525] Enable compute_node_update to tolerate deadlocks
- [9520b8d] VMware: Always upload a snapshot as a preallocated disk
- [d3c8757] Remove unneeded call to conductor in network interface
- [b047eaa] Remove reduntant call to update_instance_info_cache
- [3f72ffb] Fix changes-since filter for list-servers API
- [b09ccd5] Don't raise MySQL 2013 'Lost connection' errors
- [2bb8ce8] Add db2 communication error code when check the db connection
- [1c7ff2a] hyperv: Retry after WMI query fails to find dev
- [0d3d7c9] Retry reservation commit and rollback on deadlock
- [e095dab] Make rbd.libvirt_info parent class compatible
- [83926a0] libvirt: handle exception while get vcpu info
- [b508376] Use block_device_info at post_live_migration_at_destination
- [e52d4fa] Ensure MTU is set when the OVS vif driver is used
- [d4056f8] Add RBAC policy for ec2 API security groups calls
* debian/patches/fix-boto-versioning.patch: Dropped no longer needed.
-- Chuck Short <email address hidden> Fri, 04 Apr 2014 10:00:12 -0400
-
nova (1:2013.2.2-0ubuntu1.1) saucy-proposed; urgency=low
[ Jian Wen ]
* d/nova-compute.upstart: If libvirt-bin is installed, then wait
for it to reach running state before starting nova-compute
(LP: #907152, #1190280)
-- Chris J Arges <email address hidden> Thu, 09 Jan 2014 12:30:55 -0600
-
nova (1:2013.2.2-0ubuntu1) saucy-proposed; urgency=low
* Resynchronize with stable/havana (bcdc813) (LP: #1284643):
- [251a940] RBD backed instance can't shutdown and restart LP: 1245719
- [99febf6] Live upgrade from Havana broken by commit 62e9829 LP: 1258256
- [1379f65] DoS attack via setting os_type in snapshots (CVE-2013-6437)
LP: 1253980
- [6ad8842] Compute rpc breaks live upgrade from havana to icehouse
LP: 1258253
- [311c786] Compute rpc breaks live upgrade from havana to icehouse
LP: 1258253
- [c91ad01] VM do not resume if attach an volume when suspended LP: 1241337
- [e7b2e3a] Grizzly -> Havana nova upgrade failure: Cannot drop index
'instance_uuid' LP: 1245502
- [3ef8611] [OSSA 2014-001] Insecure directory permissions with snapshot
code (CVE-2013-7048) LP: 1227027
- [d222d2a] test_different_fname_concurrency flakey fail LP: 1270654
- [1a3985c] unit test failure in gate
nova.tests.db.test_sqlite.TestSqlite.test_big_int_mapping LP: 1271331
- [950440b] _last_vol_usage_poll was not properly updated LP: 1270693
- [05dfdb9] support stevedore >= 0.14
- [662c762] VMware: unnecesary session termination LP: 1265512
- [6da22e2] libvirt wait_for_block_job_info can infinitely loop LP: 1260123
- [6ed48aa] update security group raise HttpError500 exception LP: 1244018
- [04209bf] publish_errors cfg option is broken LP: 1240349
- [4f947f5] UnboundLocalError: local variable 'network_name' referenced
before assignment LP: 1246258
- [442fb63] Security Group extension reads all Neutron ports for anything
other that a single server LP: 1228384
- [7620252] [OSSA 2014-003] Live migration can leak root disk into
ephemeral storage (CVE-2013-7130) LP: 1251590
- [5cb4d55] Errored instance can't be deleted if volume deleted first
LP: 1222979
- [c09a51c] live migration fails when using non-image backed disk
LP: 1257355
- [a3d861f] Network cache not correctly updated during "interface-attach"
LP: 1223859
- [2c44ed7] vmware driver does not work with more than one datacenter in vC
LP: 1214850
- [abacc29] nova compute hang with file injection off, config drive off,
neutron networking LP: 1276268
- [2abcc4e] boto 2.25 causing unit tests to fail LP: 1277790
- [bcdc813] NoopQuotaDriver returns usages incorrect format LP: 1244842
-- Chuck Short <email address hidden> Tue, 25 Feb 2014 09:43:16 -0500
-
nova (1:2013.2.1-0ubuntu1) saucy-proposed; urgency=low
* Resynchronize with stable/havana (a4ffc06) (LP: #1262788):
- [6bf7e78] datastore selection bug - fills first disk only LP: 1227825
- [66e5a8d] Deploy instances failed on Hyper-V with Chinese locale
LP: 1229671
- [6e50dbd] flavor pagination incorrectly uses id rather than flavorid
LP: 1226698
- [66f2db5] Regression: Cinder Volumes "unable to find iscsi target" for
VMware instances LP: 1193980
- [d8e6477] Restarting nova compute has an exception LP: 1243291
- [a6fc29a] exception.InstanceIsLocked is not caught in start and stop
server api LP: 1233026
- [2e3da55] VMware: errors booting from volume via Horizon LP: 1235022
- [3cdfe89] [OSSA 2013-029] Unchecked qcow2 root disk sizes DoS LP: 1206081
- [a44c4d2] nova-api-{ec2,metadata,os-compute} don't allow SSL to be
enabled LP: 1237126
- [e360dc2] notification failure in _sync_power_states LP: 1244311
- [cde1eaa] notification not available for deleting an instance having no
host associated LP: 1211742
- [55d87dc] Clear text password has been print in log by some API call
LP: 1231263
- [c139717] Unshelving an instance with an attached volume causes the
volume to not get attached LP: 1246412
- [458c79f] Bogus ERROR level debug spew when creating a new instance
LP: 1239603
- [31c9322] VMware: restarting nova compute reports invalid instances
LP: 1237795
- [818aac9] Nova api doesn't start with a backdoor port set LP: 1243260
- [84f20a7] NBD mount errors when booting an instance from volume
LP: 1188543
- [85c8f12] Hyper-V fails to spawn snapshots LP: 1234759
- [f7cfc1c] target_iqn is referenced before assignment after exceptions in
hyperv/volumeop.py attch_volume() LP: 1233837
- [0df673f] API cell always doing local deletes LP: 1240247
- [727261e] flavor extra spec api fails with XML content type if key
contains a colon LP: 1213927
- [ef9aec1] infinite recursion when deleting an instance with no network
interfaces LP: 1251792
- [9aea662] encryptors module forces cert and scheduler services to depend
on cinderclient LP: 1246103
- [c51001e] TypeError in periodic task 'update_available_resource'
LP: 1238374
- [43d1385] nova compute crashes if you do not have any hosts in your
cluster LP: 1197041
- [8a99344] VMware: Detaching a volume from an instance also deletes the
volume's backing vmdk (ESXDriver only) LP: 1241350
- [8affa07] libvirt's _create_ephemeral must accept max_size LP: 1250032
- [5847e57] Avoid clobbering {system_,}metadata dicts passed to instance
update
- [36a08ff] Require new python-cinderclient for Havana LP: 1230925
- [0056908] libvirt evacuate(shared storage) fails w/ Permission denied on
disk.config LP: 1247526
- [4fcd748] Nova live migration failed due to OLE error LP: 1246592
- [ac78062] Error mispelt in disk api file LP: 1253510
- [e99e9c1] min_count ignored for instance create LP: 1224453
- [8f007df] VCDriver: Failed to resize instance LP: 1199954
- [bf4addf] Tempest failures due to failure to return console logs from an
instance LP: 1251920
- [34ec05d] the snapshot of a volume-backed instance cannot be used to boot
a new instance LP: 1246327
- [6a2bab6] [messaging] QPID broadcast RPC requests to all servers for a
given topic LP: 1257293
- [ec7059a] VMwareVCDriver: snapshot failure when host in maintenance mode
LP: 1229994
- [b78f90f] VMWARE: Intermittent problem with stats reporting LP: 1252827
- [14baf9a] the snapshot of a volume-backed instance cannot be used to boot
a new instance LP: 1246327
- [5a9551d] VM re-scheduler mechanism will cause BDM-volumes conflict
LP: 1195947
- [e5cb2de] Updated from global requirements
- [a4ffc06] [OSSA 2013-033] Metadata queries from Neutron to Nova are not
restricted by tenant (CVE-2013-6419) LP: 1235450
* debian/patches: Refresh.
* debian/patches/revert-stable-havana-requirements.patch: Revert
version bumps to dependencies in stable/havana back to what was
shipped with Saucy.
-- Adam Gandelman <email address hidden> Thu, 12 Dec 2013 15:09:36 -0800
-
nova (1:2013.2-0ubuntu1) saucy; urgency=low
* New upstream release (LP: #1236462).
-- Chuck Short <email address hidden> Thu, 17 Oct 2013 11:27:05 -0400
-
nova (1:2013.2~rc2-0ubuntu1) saucy; urgency=low
* New upstream release candidate (LP: #1239156):
- d/p/fix-boto-versioning.patch: Cherry picked fix from upstream gerrit for
test failures with boto < 2.13.
* d/control: Add epoch to versioned dependencies for python-oslo.config.
-- James Page <email address hidden> Sun, 13 Oct 2013 11:05:46 +0100
-
nova (1:2013.2~rc1-0ubuntu3) saucy; urgency=low
* debian/patches/native-lxc-hypervisor.patch: Update
rootwrap.d/compute.filters to allow nova-network to start.
(LP: #1235373)
-- Chuck Short <email address hidden> Fri, 04 Oct 2013 13:18:17 -0400
-
nova (1:2013.2~rc1-0ubuntu2) saucy; urgency=low
[ Chuck Short ]
* debian/patches/fix-novnc-regression.patch: Fix regression caused
by use of more recent version of websockify upstream (LP: #1235044).
-- James Page <email address hidden> Fri, 04 Oct 2013 11:13:34 +0100
-
nova (1:2013.2~rc1-0ubuntu1) saucy; urgency=low
* New upstream release candidate.
* debian/control:
- Dropped python-setuptools-git, python-carrot, python-unittest2,
python-daemon, python-gflags, python-cheetah, python-glance,
python-lockfile, python-routes, python-xattr, python-novaclient,
python-pycurl, python-keystone, python-libxml2, python-pyparsing,
and python-d2to1.
- Suggest python-ldap for python-nova.
- Added python-mock, python-greenlet, python-keystoneclient,
python-anyjson, python-jsonschema, and python-six
- Bumped versioned dependencies for python-fixtures, python-testtools, and
testrepository,
python-stevedore,
- Added versioned depends for python-cinderclient, python-neutronclient,
python-boto, python-paramiko, python-amplib, python-eventlet,
python-glanceclient, python-oslo.config, python-paramiko, python-six
* debian/patches/fix-requirements.patch: Rediffed
* debian/patches/native-lxc-hypervisor.patch: Add native lxc support.
(LP: #1220701)
-- Chuck Short <email address hidden> Thu, 03 Oct 2013 09:42:52 -0400
-
nova (1:2013.2~b3-0ubuntu2) saucy; urgency=low
* debian/tests: Removed tests for nova-compute-xen and nova-compute-xcp.
-- Chuck Short <email address hidden> Fri, 13 Sep 2013 10:12:52 -0400
-
nova (1:2013.2~b3-0ubuntu1) saucy; urgency=low
* New usptream release.
* debian/patches/avoid_requirements_cheetah.patch: Dropped
* debian/patches/fix-sqlalchemy-0.7.9-usage.patch: Dropped
* debian/patches/fix-requirements.patch: Refreshed.
* debian/patches/path-to-the-xenhost.conf-fixup.patch: Refreshed
* debian/control: Add python-jinja2
* debian/control: Dropped python-cheetah
-- Chuck Short <email address hidden> Mon, 09 Sep 2013 13:11:11 -0400
-
nova (1:2013.2~b2-0ubuntu2) saucy; urgency=low
* debian/control: Fix python-sqlalchemy dependency.
-- Chuck Short <email address hidden> Fri, 19 Jul 2013 15:03:16 -0400
-
nova (1:2013.2~b2-0ubuntu1) saucy; urgency=low
[ Adam Gandelman ]
* d/patches/requirements_drop_requests_vers_cap.patch: Remove
upper version limit on requests dependency, which was capped upstream
to fix centos-related gating issues.
* debian/control:
- Set version requirement python-kombu (>= 2.5.12).
- Set version requirement python-pyparsing (>= 1.5.6).
- Add websockify to nova-spiceproxy Depends.
- Add spice-html5 to nova-spiceproxy Depends (LP: #1197119)
* Add nova-xvpvncproxy upstart (LP: #1197163)
[ James Page ]
* d/control: Update VCS fields for new branch locations.
[ Chuck Short ]
* New upstream release.
* debian/patches/fix-requirements.patch: Combined several
patches into one.
* debian/control: Replace python-quantumclient with python-neutronclient.
* debian/patches/fix-sqlalchemy-0.7.9-usage.patch: Temporary patch to address a FTBFS
with sqlalchemy 0.7.9.
* debian/patches/avoid-failing-test.patch: Skip failing test on buildds.
-- Chuck Short <email address hidden> Fri, 19 Jul 2013 09:15:03 -0400
-
nova (1:2013.2~b1-0ubuntu3) saucy; urgency=low
* Depend on python-oslo.config instead of python-oslo-config.
-- Adam Conrad <email address hidden> Sat, 06 Jul 2013 15:36:40 -0600
-
nova (1:2013.2~b1-0ubuntu2) saucy; urgency=low
[Yolanda Robla]
* debian/tests: added autopkgtests
[ Adam Gandelman ]
* debian/control: Set version requirements python-pbr (>= 0.5.11),
python-d2to1 (>= 0.2.10).
-- Chuck Short <email address hidden> Wed, 19 Jun 2013 13:00:11 -0500
-
nova (1:2013.2~b1-0ubuntu1) saucy; urgency=low
[ Chuck Short ]
* New upstream version.
* debian/patches/avoid_setuptools_git_dependency.patch: Dropped
no longer needed.
* debian/control: Add python-pbr and python-d2to1 as build dependencies.
* debian/control: Drop pep8 dependency.
* debian/patches/fix-ubuntu-tests.patch: Dropped no longer needed.
[ Adam Gandelman ]
* debian/patches/avoid_requirements_websockify.patch: Remove websockify
to avoid making it a dependency of every nova package.
* debian/patches/avoid_requirements_cheetah.patch: Temporarily remove
Cheetah until cheetah's dependencies have been MIR'd.
* debian/control: Add python-babel.
* debian/control: Set min. version 0.7.6 on python-netaddr dependency.
-- Chuck Short <email address hidden> Fri, 31 May 2013 07:44:38 -0500
-
nova (1:2013.1-0ubuntu2.1) raring-security; urgency=low
* SECURITY UPDATE: verify virtual size of QCOW2 images
- CVE-2013-2096.patch: update nova/virt/libvirt/imagebackend.py to
check QCOW2 image size during root disk creation
- CVE-2013-2096
-- Jamie Strandboge <email address hidden> Wed, 15 May 2013 15:16:46 -0500
-
nova (1:2013.1-0ubuntu2) raring; urgency=low
* debian/nova-cells.upstart: Fix typo in upstart job. (LP: #1163218)
* debian/control: Add iptables dependency. (LP: #1172393)
-- Chuck Short <email address hidden> Wed, 24 Apr 2013 07:39:25 -0500
