glance/releasenotes/notes/add-processlimits-to-qemu-i...

15 lines
621 B
YAML

---
security:
- All ``qemu-img info`` calls will be run under resource
limitations that limit the CPU time and address space
usage of the process if oslo.concurrency is at least
version 2.6.1. ``qemu-img info`` calls are now limited
to 2 seconds and 1 GB respectively. This addresses the
bug https://bugs.launchpad.net/glance/+bug/1449062
Current usage of "qemu-img" is limited to Glance tasks.
In the Mitaka release, tasks by default will only be
available to admin users. In general, we recommend that
tasks only be exposed to trusted users, even in releases
prior to Mitaka.