File: bug-1664931-validate-image-rebuild-9c5b05a001c94a4d.yaml

package info (click to toggle)
nova 2%3A18.1.0-6
  • links: PTS, VCS
  • area: main
  • in suites: buster
  • size: 49,532 kB
  • sloc: python: 383,759; pascal: 1,610; xml: 1,184; sh: 917; makefile: 140; sql: 43
file content (13 lines) | stat: -rw-r--r-- 517 bytes parent folder | download | duplicates (5)
1
2
3
4
5
6
7
8
9
10
11
12
13
---
security:
  - |
    `OSSA-2017-005`_: Nova Filter Scheduler bypass through rebuild action

    By rebuilding an instance, an authenticated user may be able to circumvent
    the FilterScheduler bypassing imposed filters (for example, the
    ImagePropertiesFilter or the IsolatedHostsFilter). All setups using the
    FilterScheduler (or CachingScheduler) are affected.

    The fix is in the `nova-api` and `nova-conductor` services.

    .. _OSSA-2017-005: https://security.openstack.org/ossa/OSSA-2017-005.html