ReleaseNotes/2013.2.2

= Release Notes, 2013.2.2 = The 2013.2.2 release is a Havana bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat) and OpenStack Telemetry (Ceilometer).

The bugfixes contained in this release were backported from the development branches into a stable branch. The release is intended to be a low risk update with no intentional regressions or API changes.

OpenStack Compute (Nova)

 * OSSA 2013-037 / CVE-2013-6437 - Nova compute DoS through ephemeral disk backing files
 * OSSA 2014-001 / CVE-2013-7048 - Nova live snapshots use an insecure local directory
 * OSSA 2014-003 / CVE-2013-7130 - Live migration can leak root disk into ephemeral storage

OpenStack Image Registry and Delivery Service (Glance)

 * OSSA 2014-004 / CVE-2014-1948 - Glance Swift store backend password leak

Bugs Fixed
In total, 98 launchpad bugs are fixed by this update.


 * List of OpenStack Compute (Nova) bugs fixed in the 2013.2.2 release
 * List of OpenStack Identity (Keystone) bugs fixed in the 2013.2.2 release
 * List of OpenStack Image Registry and Delivery Service (Glance) bugs fixed in the 2013.2.2 release
 * List of OpenStack Networking (Neutron) bugs fixed in the 2013.2.2 release
 * List of OpenStack Block Storage (Cinder) bugs fixed in the 2013.2.2 release
 * List of OpenStack Dashboard (Horizon) bugs fixed in the 2013.2.2 release
 * List of OpenStack Orchestration (Heat) bugs fixed in the 2013.2.2 release
 * List of OpenStack Telemetry (Ceilometer) bugs fixed in the 2013.2.2 release

Keystone
A severe performance issue within listing of revoked tokens in Keystone was fixed in this release. In order to fully benefit from the change, a run of "keystone-manage db_sync" is recommended after upgrading. This will add an additional index to the keystone table that significantly improves query performance.

Neutron
Fix for a severe performance issue in neutron-metadata-agent requires neutronclient 2.3.4 or newer (bug 1280941).