Jump to: navigation, search

Difference between revisions of "ReleaseNotes/2014.1.3"

 
(6 intermediate revisions by 2 users not shown)
Line 1: Line 1:
= *DRAFT* Release Notes, 2014.1.3 =
+
= Release Notes, 2014.1.3 =
  
 
The 2014.1.3 release is a Icehouse bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat), OpenStack Telemetry (Ceilometer) and Openstack Database (Trove).
 
The 2014.1.3 release is a Icehouse bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat), OpenStack Telemetry (Ceilometer) and Openstack Database (Trove).
Line 8: Line 8:
  
 
== Resolved Security Issues ==
 
== Resolved Security Issues ==
 +
=== OpenStack Block Storage (Cinder) ===
 +
* [http://lists.openstack.org/pipermail/openstack-announce/2014-October/000288.html OSSA 2014-33] / [https://launchpad.net/bugs/1350504 CVE-2014-3641] - Cinder-volume host data leak to vm instance
 +
=== OpenStack Compute (Nova) ===
 +
* [http://lists.openstack.org/pipermail/openstack-announce/2014-October/000287.html OSSA 2014-032] / [https://launchpad.net/bugs/1338830 CVE-2014-3608] - Nova VMware driver still leaks rescued images
  
 
=== OpenStack Image Registry and Delivery Service (Glance)  ===
 
=== OpenStack Image Registry and Delivery Service (Glance)  ===
Line 22: Line 26:
  
 
== Bugs Fixed ==
 
== Bugs Fixed ==
In total, 129 bugs are fixed by this update.  
+
In total, 131 bugs are fixed by this update.  
  
* [https://launchpad.net/nova/+milestone/2014.1.3 List of OpenStack Compute (Nova) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/nova/icehouse/2014.1.3 List of OpenStack Compute (Nova) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/keystone/+milestone/2014.1.3 List of OpenStack Identity (Keystone) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/keystone/icehouse/2014.1.3 List of OpenStack Identity (Keystone) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/glance/+milestone/2014.1.3 List of OpenStack Image Registry and Delivery Service (Glance) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/glance/icehouse/2014.1.3 List of OpenStack Image Registry and Delivery Service (Glance) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/neutron/+milestone/2014.1.3 List of OpenStack Networking (Neutron) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/neutron/icehouse/2014.1.3 List of OpenStack Networking (Neutron) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/cinder/+milestone/2014.1.3 List of OpenStack Block Storage (Cinder) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/cinder/icehouse/2014.1.3 List of OpenStack Block Storage (Cinder) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/horizon/+milestone/2014.1.3 List of OpenStack Dashboard (Horizon) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/horizon/icehouse/2014.1.3 List of OpenStack Dashboard (Horizon) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/heat/+milestone/2014.1.3 List of OpenStack Orchestration (Heat) bugs fixed in the 2014.1.3 release]   
+
* [https://launchpad.net/heat/icehouse/2014.1.3 List of OpenStack Orchestration (Heat) bugs fixed in the 2014.1.3 release]   
* [https://launchpad.net/ceilometer/+milestone/2014.1.3 List of OpenStack Telemetry (Ceilometer) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/ceilometer/icehouse/2014.1.3 List of OpenStack Telemetry (Ceilometer) bugs fixed in the 2014.1.3 release]
* [https://launchpad.net/trove/+milestone/2014.1.3 List of OpenStack Database (Trove) bugs fixed in the 2014.1.3 release]
+
* [https://launchpad.net/trove/icehouse/2014.1.3 List of OpenStack Database (Trove) bugs fixed in the 2014.1.3 release]
  
 
== Known Issues and Limitations ==
 
== Known Issues and Limitations ==
  
There is a known issue in all Icehouse releases that results in Neutron DHCP agent constantly resyncing its state once a network and a subnet is created with a gateway outside of it. To avoid this, users are encouraged to set force_gateway_on_subnet to True in neutron.conf. See [https://bugs.launchpad.net/neutron/+bug/1304181 Bug 1304181]
+
* There is a known issue in all Icehouse releases that results in Neutron DHCP agent constantly resyncing its state once a network and a subnet is created with a gateway outside of it. To avoid this, users are encouraged to set force_gateway_on_subnet to True in neutron.conf. See [https://bugs.launchpad.net/neutron/+bug/1304181 Bug 1304181]
  
Operators of existing Neutron Icehouse ML2 based deployments will need to apply the following SQL statement to their Neutron database:
+
* Operators of existing Neutron Icehouse ML2 based deployments will need to apply the following SQL statement to their Neutron database.  This is to fix a race condition in agent status report updates.  See [https://bugs.launchpad.net/neutron/+bug/1254246 Bug 1254246]:
 +
 
 +
  ALTER TABLE agents ADD CONSTRAINT uniq_agents0agent_type0host UNIQUE (agent_type, host);
 +
 
 +
* A new runtime dependency on conntrack-tools in L3 agent sneaked in the release. This is an issue for at least one of target distributions for Icehouse (specifically, RHEL6/RHEL7), so a revert for the patch that introduced the dependency was requested: https://review.openstack.org/#/c/132052/ Packagers of 2014.1.3 release are left with dilemma: either they also revert the patch in their downstream packages, or they introduce a new runtime conntrack-tools dependency for Neutron L3 agent.
  
<nowiki>
 
ALTER TABLE agents ADD CONSTRAINT uniq_agents0agent_type0host UNIQUE (agent_type, host);
 
</nowiki>
 
  
This is to fix a race condition in agent status report updates.  See [https://bugs.launchpad.net/neutron/+bug/1254246 Bug 1254246]
 
 
[[Category:Releases]]
 
[[Category:Releases]]
 
[[Category:Icehouse]]
 
[[Category:Icehouse]]

Latest revision as of 16:51, 17 June 2015

Release Notes, 2014.1.3

The 2014.1.3 release is a Icehouse bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat), OpenStack Telemetry (Ceilometer) and Openstack Database (Trove).

The bugfixes contained in this release were backported from the development branches into a stable branch. The release is intended to be a low risk update with no intentional regressions or API changes.

Resolved Security Issues

OpenStack Block Storage (Cinder)

OpenStack Compute (Nova)

OpenStack Image Registry and Delivery Service (Glance)

OpenStack Dashboard (Horizon)

OpenStack Identity (Keystone)

OpenStack Networking (Neutron)

Bugs Fixed

In total, 131 bugs are fixed by this update.

Known Issues and Limitations

  • There is a known issue in all Icehouse releases that results in Neutron DHCP agent constantly resyncing its state once a network and a subnet is created with a gateway outside of it. To avoid this, users are encouraged to set force_gateway_on_subnet to True in neutron.conf. See Bug 1304181
  • Operators of existing Neutron Icehouse ML2 based deployments will need to apply the following SQL statement to their Neutron database. This is to fix a race condition in agent status report updates. See Bug 1254246:
 ALTER TABLE agents ADD CONSTRAINT uniq_agents0agent_type0host UNIQUE (agent_type, host);
  • A new runtime dependency on conntrack-tools in L3 agent sneaked in the release. This is an issue for at least one of target distributions for Icehouse (specifically, RHEL6/RHEL7), so a revert for the patch that introduced the dependency was requested: https://review.openstack.org/#/c/132052/ Packagers of 2014.1.3 release are left with dilemma: either they also revert the patch in their downstream packages, or they introduce a new runtime conntrack-tools dependency for Neutron L3 agent.