-
nova (1:2014.1.5-0ubuntu1.7) trusty-security; urgency=medium
* SECURITY UPDATE: DoS via instance deletion during migration
- debian/patches/CVE-2015-3241-1.patch: check for resize path on
libvirt instance delete in nova/tests/virt/libvirt/test_libvirt.py,
nova/virt/libvirt/driver.py.
- debian/patches/CVE-2015-3241-1.patch: sync process utils from oslo in
nova/openstack/common/processutils.py.
- debian/patches/CVE-2015-3241-1.patch: kill rsync/scp processes before
deleting instance in nova/tests/virt/libvirt/test_libvirt.py,
nova/tests/virt/libvirt/test_libvirt_utils.py,
nova/virt/libvirt/driver.py, nova/virt/libvirt/instancejobtracker.py,
nova/virt/libvirt/utils.py.
- CVE-2015-3241
* SECURITY UPDATE: DoS via instance deletion during resize
- debian/patches/CVE-2015-3280.patch: delete orphaned instance files
from compute nodes in nova/compute/manager.py,
nova/tests/compute/test_compute_mgr.py.
- CVE-2015-3280
* SECURITY UPDATE: DoS via crafted disk image
- debian/patches/CVE-2015-5162-1.patch: add prlimit parameter to
execute() in nova/openstack/common/prlimit.py,
nova/openstack/common/processutils.py,
nova/tests/openstack_common/test_processutils.py.
- debian/patches/CVE-2015-5162-2.patch: add support for missing process
limits in nova/openstack/common/prlimit.py,
nova/openstack/common/processutils.py,
nova/tests/openstack_common/test_processutils.py.
- debian/patches/CVE-2015-5162-3.patch: set address space & CPU time
limits when running qemu-img in nova/virt/images.py,
nova/tests/virt/libvirt/test_libvirt.py,
nova/tests/virt/libvirt/test_image_utils.py,
nova/tests/virt/libvirt/test_libvirt_utils.py.
- CVE-2015-5162
* SECURITY UPDATE: arbitrary file read via snapshot
- debian/patches/CVE-2015-7548-1.patch: fix format detection in libvirt
snapshot in nova/tests/virt/libvirt/fake_libvirt_utils.py,
nova/tests/virt/libvirt/test_image_utils.py,
nova/tests/virt/libvirt/test_libvirt_utils.py,
nova/virt/libvirt/driver.py, nova/virt/libvirt/utils.py.
- debian/patches/CVE-2015-7548-2.patch: fix format conversion in
libvirt snapshot in nova/tests/virt/libvirt/test_libvirt.py,
nova/virt/images.py, nova/virt/libvirt/imagebackend.py.
- debian/patches/CVE-2015-7548-3.patch: fix backing file detection in
libvirt live snapshot in nova/tests/virt/libvirt/test_libvirt.py,
nova/tests/virt/libvirt/fake_libvirt_utils.py, nova/virt/images.py,
nova/virt/libvirt/driver.py, nova/virt/libvirt/utils.py.
- debian/patches/CVE-2015-7548-4.patch: disable live snapshot for
rbd-backed instances in nova/virt/libvirt/driver.py.
- CVE-2015-7548
* SECURITY UPDATE: restriction bypass via security group changes
- debian/patches/CVE-2015-7713.patch: don't expect meta attributes in
object_compat that aren't in the db obj in nova/compute/manager.py,
nova/tests/compute/test_compute.py.
- CVE-2015-7713
* SECURITY UPDATE: password disclosure via xen log files
- debian/patches/CVE-2015-8749.patch: mask passwords in volume
connection_data dict in nova/virt/xenapi/volume_utils.py.
- CVE-2015-8749
* SECURITY UPDATE: arbitrary file read via crafted qcow2 header
- debian/patches/CVE-2016-2140-1.patch: always copy or recreate
disk.info during a migration in nova/virt/libvirt/driver.py,
nova/tests/virt/libvirt/test_libvirt.py.
- debian/patches/CVE-2016-2140-2.patch: fix processing of libvirt
disk.info in non-disk-image cases in nova/virt/libvirt/driver.py,
nova/tests/virt/libvirt/test_libvirt.py.
- debian/patches/CVE-2016-2140-3.patch: decode disk_info before use in
nova/tests/virt/libvirt/test_libvirt.py, nova/virt/libvirt/driver.py.
- CVE-2016-2140
* Thanks to Red Hat for the backports many of these patches are based on.
-- Marc Deslauriers <email address hidden> Wed, 13 Sep 2017 14:30:17 -0400
-
nova (1:2014.1.5-0ubuntu1.6) trusty; urgency=medium
* Allow evacuate for an instance in the Error state (LP: #1298061)
- d/p/remove_useless_state_check.patch remove unnecessary task_state check
- d/p/evacuate_error_vm.patch Allow evacuate from error state
-- Liang Chen <email address hidden> Fri, 09 Sep 2016 17:41:48 +0800
-
nova (1:2014.1.5-0ubuntu1.5) trusty; urgency=medium
* Fix live migration usage of the wrong connector (LP: #1475411)
- d/p/Fix-live-migrations-usage-of-the-wrong-connector-inf.patch
* Fix wrong used ProcessExecutionError exception (LP: #1308839)
- d/p/Fix-wrong-used-ProcessExecutionError-exception.patch
* Clean up iSCSI multipath devices in Post Live Migration (LP: #1357368)
- d/p/Clean-up-iSCSI-multipath-devices-in-Post-Live-Migrat.patch
* Detach iSCSI latest path for latest disk (LP: #1374999)
- d/p/Detach-iSCSI-latest-path-for-latest-disk.patch
-- Billy Olsen <email address hidden> Fri, 29 Apr 2016 15:35:01 -0700
-
nova (1:2014.1.5-0ubuntu1.4) trusty; urgency=medium
* Protect against possible rpcapi mismatch on upgrade (LP: #1506257)
- d/p/protect-against-upgrade-rpc-ver-mismatch.patch
-- Edward Hope-Morley <email address hidden> Thu, 22 Oct 2015 10:00:29 -0500
-
nova (1:2014.1.5-0ubuntu1.3) trusty; urgency=medium
* Attempting to attach the same volume multiple times can cause
bdm record for existing attachment to be deleted. (LP: #1349888)
- d/p/fix-creating-bdm-for-failed-volume-attachment.patch
-- Edward Hope-Morley <email address hidden> Tue, 08 Sep 2015 12:32:45 +0100
-
nova (1:2014.1.5-0ubuntu1.2) trusty; urgency=medium
* Add rsyslog retry support (LP: #1459046)
- d/p/add-support-for-syslog-connect-retries.patch
* Add vm clean shutdown support (LP: #1196924)
- d/p/clean-shutdown.patch
-- Edward Hope-Morley <email address hidden> Thu, 16 Jul 2015 11:55:57 +0100
-
nova (1:2014.1.5-0ubuntu1.1) trusty; urgency=medium
[ Edward Hope-Morley ]
- d/nova-compute.upstart: Fix (another) race between nova-compute
and neutron-ovs-cleanup (LP: #1471022)
-- Edward Hope-Morley <email address hidden> Wed, 08 Jul 2015 09:44:18 -0500
-
nova (1:2014.1.5-0ubuntu1) trusty; urgency=medium
* Resynchronize with stable/icehouse (08b5d48) (LP: #1467533):
- [74295ed] Use ebtables to isolate dhcp traffic
- [a83eb5f] VMware: fix AttributeError: TaskInfo instance has no attribute 'name'
- [8876294] libvirt: partial fix for live-migration with config drive
- [b77c188] Type conflict in trusted_filter.py using attestation_port default value
- [378a8d4] Use instance.uuid instead of instance
- [c12f21d] Make test_version_string_with_package_is_good work with pbr 0.11
- [1668178] Moves trusted filter unit tests into own file
- [4812617] Use hypervisor hostname for compute trust level
- [d8853ee] Recover from POWERING-* state on compute manager start-up
- [0784b0c] Avoid referring to juno-era exception type
- [f513a28] libvirt: Make sure volumes are well detected during block migration
- [68ec684] libvirt: avoid changing UUID when redefining nwfilters
- [cc86ef5] delete python bytecode before every test run
- [3501ec2] Drop use of oslo.utils in nova
- [392dc22] Eventlet green threads not released back to pool
- [1e03160] Sync strutils from oslo-incubator for mask_password fix
- [7292c02] Allow instances to attach to shared external nets
- [dbc348d] Fix libvirt watchdog support
- [08b5d48] HyperV Driver - Fix to implement hypervisor-uptime
* d/p/drop-oslo-utils-usage.patch: Dropped; Fixed upstream.
* d/p/recover-from-power-state-on-compute.patch: Dropped; Fixed upstream.
* d/p/fix-requirements.patch: Rebased.
-- Corey Bryant <email address hidden> Mon, 22 Jun 2015 10:15:07 -0400
-
nova (1:2014.1.4-0ubuntu2.1) trusty; urgency=medium
* Ensure that compute manager restarts during instance power
operations don't leave instances stuck in transitional task
states (LP: #1304333):
- d/p/recover-from-power-state-on-compute.patch
Cherry pick backport of upstream fix from OpenStack >= Juno.
-- Edward Hope-Morley <email address hidden> Wed, 22 Apr 2015 09:51:28 +0100
-
nova (1:2014.1.4-0ubuntu2) trusty; urgency=medium
[ Edward Hope-Morley ]
* Fixed race between nova-compute and neutron-ovs-cleanup (LP: #1420572)
[ Corey Bryant ]
* d/control: Set minimum python-six dependency to 1.5.2 (LP: #1403114).
-- Corey Bryant <email address hidden> Mon, 30 Mar 2015 09:28:30 -0400
-
nova (1:2014.1.4-0ubuntu1) trusty; urgency=medium
* Resynchronize with stable/icehouse (cac6472) (LP: #1432608):
- [0ff6742] Websocket Proxy should verify Origin header
- [c70e1fb] Fix kwargs['instance'] KeyError in @reverts_task_state decorator
- [07ec12c] Revert "Eventlet green threads not released back to pool"
- [e9cf07b] Compute: Catch binding failed exception while init host
- [e275961] Make tests use sha256 as openssl default digest algorithm
- [a657582] Eventlet green threads not released back to pool
- [4b46a86] Fix image metadata returned for volumes
- [58a6393] Check min_ram and min_disk when boot from volume
- [c5411d2] Extends use of ServiceProxy to more methods in HostAPI in cells
- [1e2abd6] Remove usage of self.__dict__ for message var replacement
- [54f9225] only emit deprecation warnings once
- [52103be] Fix disconnecting necessary iSCSI sessions issue
- [cca94d0] Fix connecting unnecessary iSCSI sessions issue
- [ac9f5c7] Fix wrong command for _rescan_multipath
- [d7c8e93] Fix unsafe SSL connection on TrustedFilter
- [9ecc468] Fix SecurityGroupExists error when booting instances
- [33be7d7] Update "num_instance" during delete instance
- [3de3f10] Fix nova evacuate issues for RBD
- [fe289fb] Fix nova-compute start issue after evacuate
- [f781656] Add _security_group_ensure_default() DBAPI method
- [8812672] Run build_and_run_instance in a separate greenthread
- [b6a080b] Fixes DOS issue in instance list ip filter
- [5ab0421] Make the block device mapping retries configurable
- [0695e14] Retry on closing of luks encrypted volume in case device is busy
- [dffa810] Add @_retry_on_deadlock to _instance_update()
- [f086ca3] Nova api service doesn't handle SIGHUP properly
- [7cdb643] Fix XML UnicodeEncode serialization error
- [98a6c1e] postgresql: use postgres db instead of template1
- [155664f] share neutron admin auth tokens
- [3e80433] VMware: validate that VM exists on backend prior to deletion
- [d71445c] VMWare: Fix VM leak when deletion of VM during resizing
- [56b62b7] Sync process utils from oslo
- [ddd62ff] VMware: prevent race condition with VNC port allocation
- [4174130] Fixes Hyper-V volume mapping issue on reboot
- [bfeae68] Fix CellStateManagerFile init to failure
- [5ec3cd3] Raise descriptive error for over volume quota
- [f9fad7a] Fixes missing ec2 api address disassociate error on failure
- [64ec1bf] Fix instance cross AZ check when attaching volumes
- [698c821] Ignore errors when deleting non-existing vifs
- [8141e7a] libvirt: Handle unsupported host capabilities
- [df9ead9] libvirt: Make `fakelibvirt.libvirtError` match
- [cac6472] Add _wrap_db_error() support to SessionTransaction.commit()
* d/p/drop-oslo-utils-usage.patch: Added to override new oslo.utils dep.
* d/p/disable-websockify-tests.patch: Added to disable websockify tests.
* d/p/block-device-mapping-config.patch: Dropped. Fixed upstream in [5ab0421].
* d/p/libvirt-Handle-unsupported-host-capabilities.patch: Dropped. Fixed
upstream in [8141e7a] and [df9ead9].
* d/p/cells-json-store.patch: Dropped. Fixed upstream in [bfeae68].
* d/p/fix-requirements.patch: Rebased.
* d/p/update-run-tests.patch: Run tests with default concurrencey.
-- Corey Bryant <email address hidden> Fri, 20 Mar 2015 07:27:23 +0000
-
nova (1:2014.1.3-0ubuntu2) trusty; urgency=medium
[ Corey Bryant ]
* d/p/block-device-mapping-config.patch: Make the block device mapping
retries configurable (LP: #1376927).
-- Chuck Short <email address hidden> Wed, 12 Nov 2014 09:22:45 -0500
-
nova (1:2014.1.3-0ubuntu1.1) trusty-security; urgency=medium
* No change rebuild for security:
- [82a13b3] VM in rescue state must have a restricted set of actions
+ CVE-2014-3604
+ LP: #1338830
- [f58d95c] Sync process and str utils from oslo
+ CVE-2014-7230
+ LP: #1343604
-- Marc Deslauriers <email address hidden> Tue, 21 Oct 2014 12:07:58 -0400
-
nova (1:2014.1.3-0ubuntu1) trusty; urgency=medium
[ Liam Young ]
* d/p/cells-json-store.patch: Fix issue with nova-cells failing when using
JSON file to store cell information (LP: #1314677).
[ Corey Bryant ]
* Resynchronize with stable/icehouse (a058646) (LP: #1377136):
- [1a95c95] Adds tests for Hyper-V VM Utils
- [bb47d55] Removes unnecessary instructions in test_hypervapi
- [4f41d37] Fixes a Hyper-V list_instances localization issue
- [9015410] Adds list_instance_uuids to the Hyper-V driver
- [3371ad8] Add _wrap_db_error() support to Session.commit()
- [dfb0e0f] Neutron: Atomic update of instance info cache
- [bce481c] Ensure info cache updates don't overwhelm cells
- [f58d95c] Sync process and str utils from oslo
- [4e6371b] remove test_multiprocess_api
- [7e09173] Fixes Hyper-V agent force_hyperv_utils_v1 flag issue
- [7523ab4] Fix attaching config drive issue on Hyper-V when migrate instances
- [74e0ba7] Fix live-migration failure in FC multipath case
- [b61aa4d] libvirt: Save device_path in connection_info when booting from volume
- [f93b8ee] Made unassigned networks visible in flat networking
- [82cc3be] Do not fail cell's instance deletion, if it's missing info_cache
- [d72c0a4] Fixes Hyper-V boot from volume root device issue
- [0d3dad7] Fixes Hyper-V resize down exception
- [5d5970a] db: Add @_retry_on_deadlock to service_update()
- [9596f52] Add Hyper-V driver in the "compute_driver" option description
- [4a8d6ca] Block sqlalchemy migrate 0.9.2 as it breaks all of nova
- [311ab57] Move the error check for "brctl addif"
- [df09c2a] Fix rootwrap for non openstack.org iqn's
- [1613cd99] Fix instance boot when Ceph is used for ephemeral storage
- [4bc680f] Make floatingip-ip-delete atomic with neutron
- [0d69163] Fix race condition with vif plugging in finish migrate
- [520aa4c] libvirt: Use VIR_DOMAIN_AFFECT_LIVE for paused instances
- [3c34e37] add repr for event objects
- [1b7ab22] make lifecycle event logs more clear
- [e1d6e18] Catch missing Glance image attrs with None
- [b591389] Update block_device_info to contain swap and ephemeral disks
- [2155188] Adds get_instance_disk_info to compute drivers
- [87f842d] Fixes Hyper-V vm state issue
- [1106ef2] Fix expected error details from jsonschema
- [e5e6bc7] Include next link when default limit is reached
- [526853e] Fix FloatingIP.save() passing FixedIP object to sqlalchemy
- [4e1e217] Read deleted instances during lifecycle events
- [d8b9ba5] Add a retry_on_deadlock to reservations_expire
- [b53adea] Add expire reservations in backport position.
- [e874ee2] Fixes Hyper-V SCSI slot selection
- [471e644] VMware: do not cache image when root_gb is 0
- [825cfe4] Fix _parse_datetime in simple tenant usage extension
- [073ee06] Avoid traceback logs from simple tenant usage extension
- [9447203] replace NovaException with VirtualInterfaceCreate when neutron fails
- [6b7cb1a] libvirt: convert cpu features attribute from list to a set
- [7ca83e8] Delete image when backup operation failed on snapshot step
- [82a13b3] VM in rescue state must have a restricted set of actions
- [e7d2087] shelve doesn't work on nova-cells environment
- [aeb71a8] libvirt: return the correct instance path while cleanup_resize
- [cce6d22] Fix nova image-show with queued image
- [aff80d5] _translate_from_glance() can cause an unnecessary HTTP request
- [a058646] Loosen import_exceptions to cover all of gettextutils
* d/p/libvirt-convert-cpu-features-attribute-from-list-to-.patch: Dropped.
Code has been fixed upstream.
* d/p/libvirt-Handle-unsupported-host-capabilities.patch: Rebased.
-- Chuck Short <email address hidden> Mon, 06 Oct 2014 09:24:45 -0400
-
nova (1:2014.1.2-0ubuntu1.1) trusty-security; urgency=medium
* No change rebuild for security:
- [9f59ca7] Avoid possible timing attack in metadata api
+ CVE-2014-3517
+ LP: #1325128
-- Jamie Strandboge <email address hidden> Thu, 21 Aug 2014 09:01:19 -0500
-
nova (1:2014.1.2-0ubuntu1) trusty; urgency=medium
[ Corey Bryant ]
* Resynchronize with stable/icehouse (c545075) (LP: #1354159):
- [1408081] Mask block_device_info auth_password in virt driver debug logs
- [8d7de91] VMware: Add check for datacenter with no datastore
- [0d9419f] Fixes hyper-v volume attach when host is AD member
- [1469c8e] Prevent clean-up of migrating instances on compute init
- [0617601] VMware: use default values in get_info() when properties are missing
- [c8df2ac] Set python hash seed to 0 in tox.ini
- [7de0132] Do not pass instances without host to compute API
- [811cab7] Do not process events for instances without host
- [0e1580e] Attach/detach interface to paused instance with affect live flag
- [397de7b] Turn periodic tasks off in all unit tests
- [9f59ca7] Avoid possible timing attack in metadata api
- [72cc37d] Handle service creation race by service workers
- [af7ba1c] Fixes rbd backend image size
- [a8b52c0] VMware: Fix race in spawn() when resizing cached image
- [132d5a2] Avoid re-adding iptables rules for instances that have disappeared
- [0142324] VMware: Fix fake raising the wrong exception in _remove_file
- [b08f62a] Fix security group list when not defined for an instance
- [f598864] libvirt: Make nwfilter driver use right filterref
- [da777f1] Make sure domain exists before referencing it
- [8d260a8] Scheduler: enable scheduler hint to pass the group name
- [4c551d9] Instance groups: add method get_by_hint
- [9f5d2a6] Avoid referencing stale instance/network_info dicts in firewall
- [e43c43e] Neutronv2 api does not support neutron without port quota
- [120ecf3] Fix the wrong dest of 'vlan' option and add new 'vlan_start' option
- [f864329] Use default rpc_response_timeout in unit tests
- [4aeefa7] Network: ensure that ports are 'unset' when instance is deleted
- [a365897] Save connection info in libvirt after volume connect
- [d1c5736] Cleanup allocating networks when InstanceNotFound is raised
- [2f40191] Failure during termination should always leave state as error()
- [485f25d] Use no_timer_check with soft-qemu
- [0994254] Use correct project/user for quotas
- [4c6b0f7] Revert "Remove broken quota-classes API"
- [96212b1] libvirt: Refresh volume connection_info after volume snapshot
- [c104f2f] Set the volume access mode during volume attach
- [c754305] VCDriver - Ignore host in Maintenance mode in stats update
- [4820dbb] VMware: Fix memory leaks caused by caches
- [0252c87] Include pending task in log message on skip sync_power_state
- [9095bcf] Fixes Hyper-V iSCSI target login method
- [17e71f7] VMware: prevent image snapshot if no root disk defined
- [c545075] versions API: ignore request with a body
* d/p/fix-requirements.patch: Refreshed.
* d/p/Fixes-rdb-backend-image-size.patch: Dropped. Fixed upstream in 2014.1.2.
[ James Page ]
* d/watch: Point to tarballs.openstack.org for release artifacts.
-- Corey Bryant <email address hidden> Thu, 07 Aug 2014 17:16:50 -0400
-
nova (1:2014.1.1-0ubuntu2) trusty; urgency=high
* Cherry picked two fixes from upstream.
- [2cebfd2] libvirt: convert cpu features attribute from list to a set (LP: #1267191)
- [b86a0e5] Fixes rdb backend image size (LP: #1219658)
-- Rafael David Tinoco <email address hidden> Wed, 25 Jun 2014 12:56:15 -0300
-
nova (1:2014.1.1-0ubuntu1) trusty; urgency=medium
* Resynchronize with stable/icehouse (867341f) (LP: #1328134):
- [867341f] Fix security group race condition while listing and deleting rules
- [ffcb176] VMware: ensure rescue instance is deleted when instance is deleted
- [fe4fe70] VMware: Log additional details of suds faults
- [43f0437] Add info_cache as expected attribute when evacuate instance
- [a2da9ce] VMware: uncaught exception during snapshot deletion
- [1a45944] Catch InstanceNotFound exception if migration fails
- [ee374f1] Do not wait for neutron event if not powering on libvirt domain
- [705ad64] Reap child processes gracefully if greenlet thread gets killed
- [f769bf8] Fixes arguments parsing when executing command
- [bedb66f] Use one query instead of two for quota_usages
- [422decd] VMWare - Check for compute node before triggering destroy
- [6629116] Use debug level logging in unit tests, but don't save them.
- [088b718] support local debug logging
- [080f785] Revert "Use debug level logging during unit tests"
- [fb03028] VMWare: add power off vm before detach disk during unrescue
- [d93427a] Check for None or timestamp in availability zone api sample
- [f5c3330f] Pass configured auth strategy to neutronclient
- [74d1043] remove unneeded call to network_api on rebuild_instance
- [f1fdb3c] Remove unnecessary call to fetch info_cache
- [395ec82] Remove metadata's network-api dependence on the database
- [a48d268] InvalidCPUInfo exception added to except block
- [77392a9] Moved the registration of lifecycle event handler in init_host()
- [40ae1ee] Fix display of server group members
- [66c7ca1] Change errors_out_migration decorator to work with RPC
- [e1e140b] Don't explode if we fail to unplug VIFs after a failed boot
- [c816488] Remove unneeded call to fetch network info on shutdown
- [7f9f3ef] Don't overwrite instance object with dict in _init_instance()
- [2728f1e] Fix bug detach volume fails with "KeyError" in EC2
* debian/patches/libvirt-Handle-unsupported-host-capabilities.patch: Fix exception
when starting LXC containers. (LP: #1297962)
-- Chuck Short <email address hidden> Tue, 24 Jun 2014 10:47:47 -0400
-
nova (1:2014.1-0ubuntu1.2) trusty-security; urgency=medium
* SECURITY UPDATE: specify /etc/nova/rootwrap.conf for use with
nova-rootwrap
- CVE-2013-1068 (LP: #1185019)
-- Jamie Strandboge <email address hidden> Mon, 09 Jun 2014 09:32:44 -0500
-
nova (1:2014.1-0ubuntu1.1) trusty; urgency=medium
* debian/patches/libvirt-Handle-unsupported-host-capabilities.patch: Fix
exception when starting instances with libvirt LXC or XEN. (LP: #1297962)
-- Chuck Short <email address hidden> Tue, 20 May 2014 12:04:39 -0400
-
nova (1:2014.1-0ubuntu1) trusty; urgency=medium
[ Chuck Short ]
* debian/control: Add genisoimage as a dependency for nova-compute-vmware.
(LP: #1306484)
[ Corey Bryant ]
* New upstream release (LP: #1299055).
-- James Page <email address hidden> Thu, 17 Apr 2014 11:09:35 +0100
-
nova (1:2014.1~rc2-0ubuntu1) trusty; urgency=medium
* New upstream release candidate (LP: #1299055) including fixes for:
- Require admin context for interfaces on external networks to prevent
non-admin users directly creating ports on external networks
(LP: #1284718).
-- James Page <email address hidden> Thu, 10 Apr 2014 10:59:37 +0100
-
nova (1:2014.1~rc1-0ubuntu1) trusty; urgency=medium
[ Chuck Short ]
* debian/control: Use python-oslosphinx instead of python-oslo.sphinx.
* debian/patches/use-oslo.sphinx-namespace.patch: Dropped no longer needed
because of the python-oslo.sphinx rename.
* debian/patches/arm-console-patch.patch: Fix typo in patch to allow
booting ARM vm.
* debian/nova-common.install: Remove nova-rpc-zmq-receiver, it has been
removed upstream.
[ Corey Bryant ]
* New upstream release. (LP: #1299055)
-- Corey Bryant <email address hidden> Mon, 31 Mar 2014 16:21:50 -0400
-
nova (1:2014.1~b3-0ubuntu2) trusty; urgency=medium
* d/nova-common.postinst: Tidy detection of default sqlite to ensure
that db sync is only run against local databases (LP: #1290423).
-- James Page <email address hidden> Thu, 13 Mar 2014 11:00:23 +0000
-
nova (1:2014.1~b3-0ubuntu1) trusty; urgency=medium
* New upstream release.
* debian/patches/fix-requirements.patch: Refreshed.
* debian/patches/fix-novnc-regression.patch: Dropped no longer needed.
* debian/patches/fix-docs-build-without-network.patch: Dropped no longer needed.
* debian/control: Add python-oslo.messaging as a build dependcy.
* debian/patches/sqlachemy-0.8.3-compat.patch: Dropped no longer needed.
* debian/patches/use-oslo.sphinx-namespace.patch: Use the oslo.sphinx name
space for documentation.
* debian/patches/arm-console-patch.patch: Add additonal tty for arm64.
* debian/patches/update-run-tests.patch: Display tests results while building
and set the concurrency to 1.
* debian/control: Add subunit as a build-dependency.
-- Chuck Short <email address hidden> Thu, 06 Mar 2014 12:02:41 -0500
-
nova (1:2014.1~b2-0ubuntu4) trusty; urgency=medium
* d/p/stevedore-1.14-compat.patch: Fixup test compatibility with stevedore
>= 1.14.
-- James Page <email address hidden> Fri, 21 Feb 2014 10:23:45 +0000
-
nova (1:2014.1~b2-0ubuntu3) trusty; urgency=medium
* debian/tests/nova-compute-daemons: Drop nova-compute-uml.
-- Chuck Short <email address hidden> Fri, 31 Jan 2014 14:40:23 -0500
-
nova (1:2014.1~b2-0ubuntu2) trusty; urgency=medium
* debian/patches/fix-nova-api-fake-network.patch: Fixed nova-api-metadata
not starting. (LP: #1270845)
-- Chuck Short <email address hidden> Thu, 30 Jan 2014 14:06:29 -0500
-
nova (1:2014.1~b2-0ubuntu1) trusty; urgency=low
[ Chuck Short ]
* New upstream release.
* debian/patches/fix-libvirt-regression.patch: Dropped.
* debian/patches/sqlachemy-0.8.3-compat.patch: Refreshed.
* debian/control: Add python-pycadf dependency.
* debian/patches/fix-requirements.patch: Refreshed.
[ James Page ]
* d/nova-compute-*.conf: Update default hypervisor configurations
to use new libvirt section configuration.
* d/control: Bump version for stevedore to >= 0.12.
* d/p/*: Refreshed.
* d/control: Add new nova-compute-libvirt package to support libvirt
based hypervisors, rework dependencies for nova-compute{-*} to
align to this approach (LP: #928834).
* d/nova-compute.postinst: Renamed to nova-compute-libvirt.postinst
as its only appropriate for libvirt based hypervisors.
* d/control,nova-compute-vmware.*,rules: Add new nova-compute-vmware
hypervisor package.
* d/control: Add missing ebtables dependency for nova-network
(LP: #1161338).
* d/nova-compute.upstart: If libvirt-bin is installed, then wait
for it to reach running state before starting nova-compute
(LP: #907152, #1190280).
* d/nova-spiceproxy.logrotate: Manage the correct log file (LP: #1259332).
* d/control: Drop dependency on curl, no longer required.
* d/control,rules,nova-compute-uml.*: Drop nova-compute-uml package.
* d/nova-compute.postinst,nova-compute-libvirt.postinst: Move permissions
changes to compute rootwrap filters to nova-compute postinst.
* d/control: Add python-oslo.rootwrap to BD's.
-- Chuck Short <email address hidden> Thu, 23 Jan 2014 13:26:34 -0500
-
nova (1:2014.1~b1-0ubuntu2) trusty; urgency=low
* d/nova-compute.postinst.in: rename to nova-compute.postinst
as libvirtd detection is no longer done in d/rules.
-- James Page <email address hidden> Wed, 11 Dec 2013 09:38:18 +0000
-
nova (1:2014.1~b1-0ubuntu1) trusty; urgency=low
* New upstream release.
* debian/control:
- Open icehouse release.
- Bump the versioned dependencies of python-pbr, python-migrate,
and python-six.
- Add "X-Python-Version:"
* Dropped xcp support (LP: #1197386) (LP: #1199791):
- debian/patches/path-to-the-xenhost.conf-fixup.patch: Removed
- debian/control: Removed nova-compute-xcp, nova-xcp-plugins,
and nova-xcp-network.
* debian/patches/fix-boto-versioning.patch: Dropped no longer needed.
* debian/patches/native-lxc-hypervisor.patch: Dropped.
* Simplified debian/rules:
- Remove git vcs, its not being used by anyone, complain if you are.
- Removed libvirtd detection, no need for it so drop it.
- Simplify building required docs including mangpages.
- Add OSLO_VERSION to set correct distro version for package build.
* debian/patches/sqlachemy-0.8.3-compat.patch: Add support for
sqlachemy 0.8.3.
* debian/patches/avoid-failing-test.patch: Dropped.
* debian/patches/skip_ipv6_test.patch: Skip ipv6 test.
* debian/patches/fix-libvirt-regression.patch: Fix libvirt regression
while running the tests.
-- Chuck Short <email address hidden> Thu, 05 Dec 2013 11:25:41 -0500
-
nova (1:2013.2-0ubuntu1) saucy; urgency=low
* New upstream release (LP: #1236462).
-- Chuck Short <email address hidden> Thu, 17 Oct 2013 11:27:05 -0400
-
nova (1:2013.2~rc2-0ubuntu1) saucy; urgency=low
* New upstream release candidate (LP: #1239156):
- d/p/fix-boto-versioning.patch: Cherry picked fix from upstream gerrit for
test failures with boto < 2.13.
* d/control: Add epoch to versioned dependencies for python-oslo.config.
-- James Page <email address hidden> Sun, 13 Oct 2013 11:05:46 +0100
