OpenStack Compute (nova)

  1. Series juno
  2. Bug #1387543
  3. Comment #38

Comment 38 for bug 1387543

Revision history for this message
Abhishek Kekane (abhishek-kekane) wrote : Re: Resize/delete combo allows to overload nova-compute (CVE-2015-3241)

Hi,

To backport [1] patch to stable/kilo and stable/juno branches following steps are essential.

stable/kilo:

1. Backport oslo.concurrency change [2] to stable/kilo - Done (https://review.openstack.org/#/c/208349/)
2. Bump oslo_concurrency version to be used in nova
3. Backport [1] patch to stable/kilo

stable/juno:

1. Backport oslo.concurrency change [2] to stable/juno - Done (https://review.openstack.org/#/c/208388)
2. Once above backport is merged, then abandon patch [3] and sync these changes in nova stable/juno (similar to patch [3])
3. Backport [1] patch to stable/juno

[1] https://review.openstack.org/#/c/192986/
[2] https://review.openstack.org/#/c/197983/
[3] https://review.openstack.org/#/c/195669/