ReleaseNotes/2014.1.2

Release Notes, 2014.1.2

The 2014.1.2 release is a Icehouse bugfix update for OpenStack Compute (Nova), OpenStack Identity (Keystone), OpenStack Image Registry and Delivery Service (Glance), OpenStack Networking (Neutron), OpenStack Block Storage (Cinder), OpenStack Dashboard (Horizon), OpenStack Orchestration (Heat), OpenStack Telemetry (Ceilometer) and Openstack Database (Trove).

The bugfixes contained in this release were backported from the development branches into a stable branch. The release is intended to be a low risk update with no intentional regressions or API changes.

Resolved Security Issues

OpenStack Identity (Keystone)

Note: There was an issue with the Keystone 2014.1.2 tarballs, so new tarballs (versioned 2014.1.2.1) were generated.

• OSSA 2014-018 / CVE-2014-3476 - Keystone privilege escalation through trust chained delegation
• OSSA 2014-022 / CVE-2014-3520 - Keystone V2 trusts privilege escalation through user supplied project id

Bugs Fixed

• List of OpenStack Compute (Nova) bugs fixed in the 2014.1.2 release
• List of OpenStack Identity (Keystone) bugs fixed in the 2014.1.2 release
• List of OpenStack Image Registry and Delivery Service (Glance) bugs fixed in the 2014.1.2 release
• List of OpenStack Networking (Neutron) bugs fixed in the 2014.1.2 release
• List of OpenStack Block Storage (Cinder) bugs fixed in the 2014.1.2 release
• List of OpenStack Dashboard (Horizon) bugs fixed in the 2014.1.2 release
• List of OpenStack Orchestration (Heat) bugs fixed in the 2014.1.2 release
• List of OpenStack Telemetry (Ceilometer) bugs fixed in the 2014.1.2 release
• List of OpenStack Database (Trove) bugs fixed in the 2014.1.2 release

Known Issues and Limitations

Nova

Fix for https://bugs.launchpad.net/nova/+bug/1288609 changes how the nova-manage network create --vlan parameter is used. Previously it was used as vlan start, now it means vlan ID. Please adjust scripts that made use of the --vlan parameter.