yahoo-eng-team team mailing list archive

[Sean Dague <sean@xxxxxxxxx>]

** No longer affects: nova/folsom

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1215091

Title:
  [OSSA 2013-026] Some sequence of characters in console-log can DoS
  nova-compute (CVE-2013-4261)

Status in OpenStack Compute (Nova):
  Invalid
Status in OpenStack Compute (nova) grizzly series:
  Fix Released
Status in The Oslo library incubator:
  Invalid
Status in oslo-incubator folsom series:
  Fix Committed
Status in oslo-incubator grizzly series:
  Fix Committed
Status in OpenStack Security Advisories:
  Fix Released

Bug description:
  Reported publicly by Jaroslav Henner at:
  https://bugzilla.redhat.com/show_bug.cgi?id=999164

  for some sequence of characters in the console-log, nova console-log displays:
  ERROR: The server has either erred or is incapable of performing the requested operation. (HTTP 500)

  When console-log is ran often enough, it seems to be causeing death of
  nova-compute.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1215091/+subscriptions