yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1073306] Re: [OSSA 2013-030] xenapi migrations don't apply security group filters (CVE-2013-4497)

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Alan Pevec <1073306@xxxxxxxxxxxxxxxxxx>
Date: Thu, 20 Mar 2014 22:10:43 -0000
Reply-to: Bug 1073306 <1073306@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: nova/grizzly
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1073306

Title:
  [OSSA 2013-030] xenapi migrations don't apply security group filters
  (CVE-2013-4497)

Status in OpenStack Compute (Nova):
  Fix Released
Status in OpenStack Compute (nova) grizzly series:
  Fix Released
Status in OpenStack Security Advisories:
  Fix Released

Bug description:
  xenapi's finish_migration() is missing code to apply security group
  rules, etc.  There's code in spawn() that appears we need to also use
  in finish_migration().

  (Somewhat related, see: https://bugs.launchpad.net/bugs/1073303)

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1073306/+subscriptions