Release Notes, 2013.2.2

The 2013.2.2 release is a Havana bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat) and OpenStack Telemetry (Ceilometer).

The bugfixes contained in this release were backported from the development branches into a stable branch. The release is intended to be a low risk update with no intentional regressions or API changes.

Resolved Security Issues

OpenStack Compute (Nova)

OSSA 2013-037 / CVE-2013-6437 - Nova compute DoS through ephemeral disk backing files
OSSA 2014-001 / CVE-2013-7048 - Nova live snapshots use an insecure local directory
OSSA 2014-003 / CVE-2013-7130 - Live migration can leak root disk into ephemeral storage

OpenStack Image Registry and Delivery Service (Glance)

OSSA 2014-004 / CVE-2014-1948 - Glance Swift store backend password leak

Bugs Fixed

In total, 98 launchpad bugs are fixed by this update.

Known Issues and Limitations

Keystone

A severe performance issue within listing of revoked tokens in Keystone was fixed in this release. In order to fully benefit from the change, a run of "keystone-manage db_sync" is recommended after upgrading. This will add an additional index to the keystone table that significantly improves query performance.

Neutron

Fix for a severe performance issue in neutron-metadata-agent requires neutronclient 2.3.4 or newer (bug 1280941).

ReleaseNotes/2013.2.2