yahoo-eng-team team mailing list archive

[Stephen Finucane <sfinucan@xxxxxxxxxx>]

I'm having a hard time understanding why we should change behavior here.
There was a bug in QEMU, that bug has been fixed for over two years, and
the fix should be present in QEMU packaged by any self-respecting
distro. I'm going to mark this as wontfix. If you disagree, let me know.

** Changed in: nova
       Status: In Progress => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1781558

Title:
  Change default video model from cirrus to vga

Status in OpenStack Compute (nova):
  Won't Fix

Bug description:
  Change default video model from cirrus to vga

  Because of the bug of qemu[1], using cirrus video model
  is dangerous. To fix this problem, change the default
  video model, and disable cirrus forever.

  [1]: CVE-2017-2615 https://lists.gnu.org/archive/html/qemu-
  devel/2017-02/msg00015.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1781558/+subscriptions