[Yahoo-eng-team] [Bug 1269418] Re: nova rescue doesn't put VM into RESCUE status on vmware (CVE-2014-2573)

2014-04-22 Thread Thierry Carrez
Anyone up for a stable/havana backport ?

** Also affects: nova/icehouse
   Importance: Undecided
   Status: New

** Changed in: nova/icehouse
   Status: New = In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1269418

Title:
  nova rescue doesn't put VM into RESCUE status on vmware
  (CVE-2014-2573)

Status in OpenStack Compute (Nova):
  Fix Committed
Status in OpenStack Compute (nova) havana series:
  New
Status in OpenStack Compute (nova) icehouse series:
  In Progress
Status in The OpenStack VMwareAPI subTeam:
  In Progress
Status in OpenStack Security Advisories:
  In Progress

Bug description:
  nova rescue of VM on vmWare will create a additional VM ($ORIGINAL_ID-
  rescue), but after that, the original VM has status ACTIVE. This leads
  to

  [root@jhenner-node ~(keystone_admin)]# nova unrescue foo
  ERROR: Cannot 'unrescue' while instance is in vm_state stopped (HTTP 409) 
(Request-ID: req-792cabb2-2102-47c5-9b15-96c74a9a4819)

  the original can be deleted, which then causes leaking of the -rescue
  VM.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1269418/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1269418] Re: nova rescue doesn't put VM into RESCUE status on vmware (CVE-2014-2573)

2014-03-24 Thread Thierry Carrez
We'll need an havana backport, but maybe wait for the patch to make it
to master first to avoid duplication of work

** Also affects: nova/havana
   Importance: Undecided
   Status: New

** Changed in: ossa
   Status: Triaged = In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1269418

Title:
  nova rescue doesn't put VM into RESCUE status on vmware
  (CVE-2014-2573)

Status in OpenStack Compute (Nova):
  In Progress
Status in OpenStack Compute (nova) havana series:
  New
Status in The OpenStack VMwareAPI subTeam:
  In Progress
Status in OpenStack Security Advisories:
  In Progress

Bug description:
  nova rescue of VM on vmWare will create a additional VM ($ORIGINAL_ID-
  rescue), but after that, the original VM has status ACTIVE. This leads
  to

  [root@jhenner-node ~(keystone_admin)]# nova unrescue foo
  ERROR: Cannot 'unrescue' while instance is in vm_state stopped (HTTP 409) 
(Request-ID: req-792cabb2-2102-47c5-9b15-96c74a9a4819)

  the original can be deleted, which then causes leaking of the -rescue
  VM.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1269418/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp