Branches for Quantal

Author: Chuck Short
Revision Date: 2012-10-12 12:35:01 UTC

[ Adam Gandelman ]
* Move management of /var/lib/nova/volumes from nova-common to
  nova-volume. Ensure it has proper permissions. (LP: #1065320)
* debian/patches/avoid_setuptools_git_dependency.patch: Remove
  setuptools_git from tools/pip-requires to avoid it being automatically
  added to python-nova's runtime dependencies. (LP: #1059907)

[ Chuck Short ]
* debian/patches/rbd-security.patch: Support override of ceph rbd
  user and secret in nova-compute. (LP: #1065883)
* debian/patches/ubuntu/fix-libvirt-firewall-slowdown.patch: Fix
  refreshing of security groups in libvirt not to block on RPC calls.
  (LP: #1062314)
* debian/patches/ubuntu/fix-ec2-volume-id-mappings.patch: Read deleted
  snapshot and volume id mappings. (LP: #1065785)

Author: Jamie Strandboge
Revision Date: 2013-10-21 15:48:27 UTC

* SECURITY UPDATE: properly honor the is_public flag
  - debian/patches/CVE-2013-2256.patch, CVE-2013-4278.patch: add enforcement
    of is_public in the db layer (LP: #1194093, LP: #1212179)
  - CVE-2013-2256, CVE-2013-4278
* SECURITY UPDATE: denial of service with network security group policy
  updates
  - debian/patches/CVE-2013-4185.patch: use cached nwinfo for secgroup rules
    (LP: #1184041)
  - CVE-2013-4185

Author: Jamie Strandboge
Revision Date: 2013-10-21 15:48:27 UTC

* SECURITY UPDATE: properly honor the is_public flag
  - debian/patches/CVE-2013-2256.patch, CVE-2013-4278.patch: add enforcement
    of is_public in the db layer (LP: #1194093, LP: #1212179)
  - CVE-2013-2256, CVE-2013-4278
* SECURITY UPDATE: denial of service with network security group policy
  updates
  - debian/patches/CVE-2013-4185.patch: use cached nwinfo for secgroup rules
    (LP: #1184041)
  - CVE-2013-4185

Author: Adam Gandelman
Revision Date: 2012-11-30 23:29:05 UTC

* Resynchronize with stable/folsom (b55014ca) (LP: #1085255):
  - [3ede373] disassociate_floating_ip with multi_host=True fails
    (LP: #1074437)
  - [22d7c3b] libvirt imagecache should handle shared image storage
    (LP: #1075018)
  - [e787786] Detached and deleted RBD volumes remain associated with insance
    (LP: #1083818)
  - [9265eb0] live_migration missing migrate_data parameter in Hyper-V driver
    (LP: #1066513)
  - [3d99848] use_single_default_gateway does not function correctly
    (LP: #1075859)
  - [65a2d0a] resize does not migrate DHCP host information (LP: #1065440)
  - [102c76b] Nova backup image fails (LP: #1065053)
  - [48a3521] Fix config-file overrides for nova-dhcpbridge
  - [69663ee] Cloudpipe in Folsom: no such option: cnt_vpn_clients
    (LP: #1069573)
  - [6e47cc8] DisassociateAddress can cause Internal Server Error
    (LP: #1080406)
  - [22c3d7b] API calls to dis-associate an auto-assigned floating IP should
    return proper warning (LP: #1061499)
  - [bd11d15] libvirt: if exception raised during volume_detach, volume state
    is inconsistent (LP: #1057756)
  - [dcb59c3] admin can't describe all images in ec2 api (LP: #1070138)
  - [78de622] Incorrect Exception raised during Create server when metadata
    over 255 characters (LP: #1004007)
  - [c313de4] Fixed IP isn't released before updating DHCP host file
    (LP: #1078718)
  - [f4ab42d] Enabling Return Reservation ID with XML create server request
    returns no body (LP: #1061124)
  - [3db2a38] 'BackupCreate' should accept rotation parameter greater than or
    equal to zero (LP: #1071168)
  - [f7e5dde] libvirt reboot sometimes fails to reattach volumes
    (LP: #1073720)
  - [ff776d4] libvirt: detaching volume may fail while terminating other
    instances on the same host concurrently (LP: #1060836)
  - [85a8bc2] Used instance uuid rather than id in remove-fixed-ip
  - [42a85c0] Fix error on invalid delete_on_termination value
  - [6a17579] xenapi migrations fail w/ swap (LP: #1064083)
  - [97649b8] attach-time field for volumes is not updated for detach volume
    (LP: #1056122)
  - [8f6a718] libvirt: rebuild is not using kernel and ramdisk associated with
    the new image (LP: #1060925)
  - [fbe835f] live-migration and volume host assignement (LP: #1066887)
  - [c2a9150] typo prevents volume_tmp_dir flag from working (LP: #1071536)
  - [93efa21] Instances deleted during spawn leak network allocations
    (LP: #1068716)
  - [ebabd02] After restarting an instance volume is lost (LP: #1071069)
  - [a369303] xen volume auto device selection always picks xvdb
    (LP: #1061944)
  - [8d1095c] Calls to to_xml() to generate XML for a soft deleted flavor fail
    (LP: #1073736)
  - [1857821] nova-manage doesn't validate the key value supplied to update
    the quota (LP: #1064359)
  - [6ae32f0] Compute manager doesn't update 'host' field when it tries to run
    a VM (LP: #1073600)
  - [284f6ea] Host field set too early during builds (LP: #1060255)
  - [395511f] finish_resize failures result in NoneType exception
    (LP: #1071595)
  - [85ccf80] confirm_resize mgr call requires admin context (LP: #1071600)
  - [2dceffa] Only return the last N lines of the console log (LP: #1081436)
  - [9c7a711] console auth does not work with memcache, unicode error
    (LP: #1057279)
  - [b27f7ef] disk path not exists when using LXC with libvirt_images_type=lvm
    (LP: #1079113)
  - [1351c6b] nova-api now requires quantumclient (LP: #1070509)
  - [612f404] nova-api now requires quantumclient (LP: #1070509)
  - [7e8a166] nova-compute (folsom) fails to start, compute_driver is None
    (LP: #1081836)
  - [182ca80] Nova API does not work with QuantumV2 API subclasses
    (LP: #1070045)
  - [55d1412] 413 error code doesn't always provide Retry-After (LP: #1079387)
  - [1581505] Snapshotting LXC instance fails (LP: #1058273)
  - [197398f] Stop network.api import on network import
  - [b874d21] Scheduler Race Condition at high volume (LP: #1073956)
  - [3316e1f] Nic Ordering not guaranteed with Quantum API (LP: #1064524)
  - [ab7e37e] Stable oslo (aka common) update
  - [3f7788c] update nova to report quantum floating IPs (LP: #1023169)
  - [d3fd05b] metadata service throws 500 - NoSuchOptError (LP: #1063851)
  - [97542c9] libvirt imagecache still runs even if disabled (LP: #1075017)
  - [b31f528] OS API: XML Namespace Handling Broken (LP: #887191)
  - [76b44d9] nova-api crashes if it is run with nobody account.
    (LP: #1073858)
  - [d59f6ad] nova-compute will assign the same device name if volume-attach
    continuously (LP: #1062033)
  - [8e11181] Nova does not delete the LV on LVM backed VMs (LP: #1078085)
  - [9bf2c6a] Fixed instance deletion issue from Nova API.
  - [c0e1247] forget to release resource when terminate an instance from a
    failed compute node (LP: #1067214)
  - [49397a4] ensure_default_security_group() does not call sgh (LP: #1050982)
  - [47ff8a5] trigger_instance[add/remove]_security_group_refresh are never
    called (LP: #1057069)
  - [c9cade2] Resource reservation isn't rolled back properly for certain
    failures during Instance Create (LP: #1065092)
  - [34c3845] Resource tracker uses regex DB query too often (LP: #1060363)
  - [92eddd2] Logging CPU incompatibility when attempting live migration fails
    (LP: #1076308)
  - [8b4896b] hostname in metadata ends with . if dhcp_domain flag is empty
    (LP: #1064713)

Author: Adam Gandelman
Revision Date: 2013-02-05 22:13:28 UTC

Fix non-Ubuntu bug references.

Author: Adam Gandelman
Revision Date: 2013-04-26 01:02:10 UTC

* Dropped patches, applied upstream:
  - debian/patches/CVE-2013-1838.patch: [9561484]
  - debian/patches/CVE-2013-0335.patch: [05a3374]
  - debian/patches/CVE-2013-1664.patch: [2ae74f8]
* Resynchronize with stable/folsom (9ecd965e):
  - [975a312] Creating network failed with message handling via REST API
    LP: 1143584
  - [056a7df] live-migration to an invalid host should exist gracefully.
    Currently, it throws a stack trace LP: 1159755
  - [8f8ef21] Add a format_message method to the Exceptions
  - [2dd8f3e] Quantum Hybrid OVS driver does not set STP values correctly
    LP: 1129055
  - [c4c417e] Fixed IPs quota can break upgrades LP: 1161190
  - [c85683e] A default /24 netmask is used by dnsmasq instead of the
    configured netmasks (in netmasks table) LP: 1154929
  - [50dece6] Support external gateways in VLAN mode LP: 1012443
  - [524a5a3] Expected exception on volume attach leaves traceback in the
    logs. LP: 1155315
  - [67eb495] ec2 id mapping can be incorrect during attach volume LP: 1145490
  - [69ba489] PowerVM driver spawn failed due to missing attribute
    supported_instances LP: 1155498
  - [28aacf6] Log statement improperly output in nova-manage LP: 1018431
  - [53626bf] fixed_ips cannot reliably be released on instance termination
    LP: 1103260
  - [f8c5492] libvirt driver connection validation causes unnecessary process
    execution with libvirt/qemu LP: 1100446
  - [5b43cef] comparing datetime to None in update-time handling LP: 1096719
  - [549879d] Quantum: DHCP request fails with IptablesFirewallDriver and
    default rule as DISCARD LP: 1131223
  - [46d2060] soft_reboot followed by hard_reboot can lead to double reboot
    LP: 1046356
  - [cdc2386] libvirt: nova should enable apic setting for xen or kvm guest
    LP: 1086352
  - [9561484] DOS by allocating all fixed ips LP: 1125468
  - [d6b9d33] Affinity filter checks erroneously includes deleted instances
    LP: 1107156
  - [cb843f7] Instance is sometimes shutdown without any operation and report
    the message "Instance shutdown by itself. Calling the stop API"
    LP: 1085771
  - [05a3374] VNC proxy can be made to connect to wrong VM LP: 1125378
  - [889e9c0] nova leaves stale .part files on disk when downloading non raw
    VM images LP: 1125068
  - [2029427] Instance vm_state remains 'migrating' if source compute node
    goes down during migration LP: 973393
  - [8289d6c] rc.local editing wrong. LP: 1089668
  - [d5e7f55] nova-compute fails to start if an instance has no ip LP: 1131330
  - [7ace55f] VMs paused unbeknownst to nova compute are destroyed LP: 1097806
  - [ecd98d2] LibvirtBridgeDriver crashes when spawning an instance with
    NoopFirewallDriver LP: 1050433
  - [2ae74f8] DoS through XML entity expansion (CVE-2013-1664) LP: 1100282
  - [21d5e90] Instance stuck in task state image_snapshot LP: 1101136

Author: Adam Gandelman
Revision Date: 2013-01-09 19:27:27 UTC

debian/control: Add genisoimage as a dependency of nova-compute.
(LP: #1097879)

Author: Adam Gandelman
Revision Date: 2013-05-17 20:40:16 UTC

Include CVE-2013-2096.patch.

Author: Adam Gandelman
Revision Date: 2013-02-21 20:49:05 UTC

2012.2.3+stable-20130221-d5e7f551-0ubuntu1

Author: Adam Gandelman
Revision Date: 2013-05-28 22:31:26 UTC

* Rebase again with latest security update, which fixes regression
  introduced with original fix for CVE-2013-2096:
  - Regression fix. Nova fails to launch non-cached images (LP: #1183606)
     * debian/patches/lp1183606.patch: call prepare_template() before
       performing QCOW2 image size check