Comment 83 for bug 1449062

Revision history for this message
Sean McGinnis (sean-mcginnis) wrote : Re: qemu-img calls need to be restricted by ulimit (CVE-2015-5162)

I had the same question for mitaka, so had to dig a little deeper. oslo.concurrency 3.7.1 was the follow on release to 3.7.0 to include the prlimit option. So based on current requirements for stable/mitaka, it should be safe to backport this fix.

I did not investigate stable/liberty, but I'm assuming 2.6.1 is the same situation.