From c5245bd2ecc479c3b4fbc3e7a0b972702a0f2b2b Mon Sep 17 00:00:00 2001 From: Victor Stinner Date: Wed, 22 Jun 2016 12:39:52 +0200 Subject: [PATCH] oslo.concurrency 2.6.1 for Liberty The main change is the addition of a new prlimit parameter to processutils. This change is needed by the Nova change I135b5242af1bfdcb0ea09a6fcda21fc03a6fbe7d in Liberty to fix a security vulnerability: "qemu-img calls need to be restricted by ulimit (CVE-2015-5162)" (see related bug). $ git log efb6c0..d65d93 --oneline d65d931 processutils: add support for missing process limits e33f64f Add prlimit parameter to execute() 306cf37 Updated from global requirements d0de35f Updated from global requirements 725e2f4 Updated from global requirements d65a8b8 Update .gitreview for stable/liberty Change-Id: If6541215438f92139a9ced2cbf5b2bd4cfe41546 Related-Bug: #1449062 --- deliverables/liberty/oslo.concurrency.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deliverables/liberty/oslo.concurrency.yaml b/deliverables/liberty/oslo.concurrency.yaml index e2c847fd75..883322f184 100644 --- a/deliverables/liberty/oslo.concurrency.yaml +++ b/deliverables/liberty/oslo.concurrency.yaml @@ -39,3 +39,7 @@ releases: projects: - repo: openstack/oslo.concurrency hash: efb6c06557a437ef982b83261abe2fccb22b96f8 + - version: 2.6.1 + projects: + - repo: openstack/oslo.concurrency + hash: d65d931da8490576f0abf30f124ca3a032b481c7