OpenStack¶

• [36503][Pike, Queens] Corrected file and directory permissions according to the OpenStack community standards. For details, see Security checklist.
• [36395][Pike] Fixed the issue with the gnocchi-statsd process failing to start when Redis was unavailable.
• [36490][Pike, Queens] Fixed the issue causing inability to create Swift containers through the Horizon web UI due to cookies settings.
• [36593][Pike, Queens] Updated the openvswitch package to fix the CVE-2020-27827 and CVE-2020-35498 security vulnerabilities.
• [36511][Salt] Improved the Neutron Salt formula to support configuring network port_security_enabled.
• [36591][Pike, Queens] Updated the python-nova, python-neutron, and python-keystone packages to fix the following security vulnerabilities:
  • OSSA-2021-001
  • OSSA-2021-002
  • OSSA-2021-003
  • OSSA-2021-005
  • OSSA-2021-006
• [36569][Queens] Fixed the issue with the Ironic driver in Nova where duplicate calls to Ironic were causing instance deletion failure.
• [36321][Queens] Fixed the issue with Nova failing to resume hosts after a reboot when booting a VM with an encrypted Ceph volume as a boot device.
• [36550][Queens] Fixed the issue causing a router processing to fail if CIDR was used as allowed address pair.
• [36464][Pike] Fixed the issue causing failure to delete a subport from trunk using openstack stack update.
• [36462][Queens] Fixed the issue with tokens generated without a catalog being unusable in some OpenStack services.
• [36479][Pike] Fixed the issue with a parallel volume creation, using a volume-backed image, causing the volumes to hang with the creating or error state.
• [36502][Pike] Updated the rabbitmq-server package to fix the following security vulnerabilities:
  • CVE-2019-11287
  • CVE-2021-22116
• [36486][Queens] Added the possibility to set a unique instance serial number in Nova.