SUSE-SU-2015:2220-1

Dashboard / Vulnerabilities / SUSE-SU-2015:2220-1

SUSE-SU-2015:2220-1

Summary: Security update for openstack-nova and openstack-neutron

Details: This update for openstack-nova and openstack-neutron provides various fixes and improvements. openstack-nova: - Fix instance filtering. (bsc#927625) - Remove error messages from multipath command output before parsing. (bsc#949529) - Fix live-migration usage of the wrong connector information. - Added requirement for memcached to python-nova. (bsc#942457) - Don't expect meta attributes in object_compat that aren't in the db obj. (bsc#949070, CVE-2015-7713) - Kill rsync/scp processes before deleting instance. (bsc#935017, CVE-2015-3241) - Sync process utils from oslo for execute callbacks. (bsc#935017, CVE-2015-3241) - Fix rebuild of an instance with a volume attached. - Fixes _cleanup_rbd code to capture ImageBusy exception. - Don't try to confine a non-NUMA instance. - Include blank volumes in the block device mapping (bsc#945923) - Delete orphaned instance files from compute nodes (bsc#944178, CVE-2015-3280) openstack-neutron: - Fix usage_audit to work with ML2. - Fix UDP offloading issue with virtio VMs. (bsc#948704) - Fix ipset can't be destroyed when last rule is deleted. - Add ARP spoofing protection for LinuxBridge agent. - Don't use ARP responder for IPv6 addresses in ovs. - Stop device_owner from being set to 'network:*'. (bsc#943648, CVE-2015-5240) - NSX-mh: use router_distributed flag. - NSX-mh: Failover controller connections on socket failures. - NSX-mh: Prevent failures on router delete.

References: https://www.suse.com/support/update/announcement/2015/suse-su-20152220-1/, https://bugzilla.suse.com/927625, https://bugzilla.suse.com/935017, https://bugzilla.suse.com/935263, https://bugzilla.suse.com/939691, https://bugzilla.suse.com/942457, https://bugzilla.suse.com/943648, https://bugzilla.suse.com/944178, https://bugzilla.suse.com/945923, https://bugzilla.suse.com/948704, https://bugzilla.suse.com/949070, https://bugzilla.suse.com/949529, https://www.suse.com/security/cve/CVE-2015-3221, https://www.suse.com/security/cve/CVE-2015-3241, https://www.suse.com/security/cve/CVE-2015-3280, https://www.suse.com/security/cve/CVE-2015-5240, https://www.suse.com/security/cve/CVE-2015-7713