ReleaseNotes/2012.2.1

Release Notes, 2012.2.1

The 2012.2.1 release is a Folsom bugfix update for Nova, Glance, Cinder, Quantum, Keystone and Horizon.

The bugfixes contained in this release were backported from the development branches into a stable branch. The release is intended to be a relatively risk free update with no intentional regressions or API changes.

<<TableOfContents()>>

Upgrade Notes

• Because of a serious issue with Nova image cache management on shared storage, the image cache manager is no disabled by default. In cases where shared storage isn't in use, it can be re-enabled by setting image_cache_manager_interval = 40 in nova.conf.
• The 2.1 version of python-quantumclient is required if Nova is configured to use Quantum networking. See this review.

Resolved Security Issues

Keystone

• OSSA-2012-019/CVE-2012-5563 - Extension of token validity through token chaining
• OSSA-2012-019/CVE-2012-5571 - EC2-style credentials invalidation issue

Glance

• OSSA-2012-017.1/CVE-2012-4573/CVE-2012-5482 - Authentication bypass for image deletion

Bugs Fixed

In total, 139 launchpad bugs are fixed by this update.

• List of Nova bugs fixed in the 2012.2 release
• List of Glance bugs fixed in the 2012.2 release
• List of Cinder bugs fixed in the 2012.2 release
• List of Quantum bugs fixed in the 2012.2 release
• List of Keystone bugs fixed in the 2012.2 release
• List of Horizon bugs fixed in the 2012.2 release