v14.2.14 Nautilus released
This is the 14th backport release in the Nautilus series. This releases fixes a security flaw affecting Messenger V2 for Octopus & Nautilus, among other fixes across components. We recommend users to update to this release.
Notable Changes ¶
- CVE 2020-25660: Fix a regression in Messenger V2 replay attacks
Changelog ¶
mgr/dashboard: Strange iSCSI discovery auth behavior (pr#37333, Volker Theile)
mgr/dashboard: redirect to original URL after successful login (pr#36834, Avan Thakkar)
mgr/prometheus: add pool compression stats (pr#37563, Paul Cuzner)
bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case (pr#37824, Igor Fedotov)
bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num (pr#37823, weixinwei)
bluestore: Support flock retry (pr#37842, Kefu Chai, wanghongxu)
bluestore: attach csum for compressed blobs (pr#37843, Igor Fedotov)
osdc/ObjectCacher: overwrite might cause stray read request callbacks (pr#37813, Jason Dillaman)
mgr: avoid false alarm of MGR_MODULE_ERROR (pr#38069, Kefu Chai, Sage Weil)
mgr: fix race between module load and notify (pr#37844, Mykola Golub, Patrick Donnelly)
mon: set session_timeout when adding to session_map (pr#37554, Ilya Dryomov)
osd/osd-rep-recov-eio.sh: TEST_rados_repair_warning: return 1 (pr#37815, David Zafman)
rbd: librbd: ignore -ENOENT error when disabling object-map (pr#37814, Jason Dillaman)
rbd: rbd-nbd: don’t ignore namespace when unmapping by image spec (pr#37811, Mykola Golub)
rgw/rgw_file: Fix the incorrect lru object eviction (pr#37804, luo rixin)
rgw: fix expiration header returned even if there is only one tag in the object the same as the rule (pr#37806, Or Friedmann)
rgw: fix: S3 API KeyCount incorrect return (pr#37810, 胡玮文)
rgw: radosgw-admin should paginate internally when listing bucket (pr#37802, J. Eric Ivancich)
rgw: rgw_file: avoid long-ish delay on shutdown (pr#37552, Matt Benjamin)
rgw: use yum rather than dnf for teuthology testing of rgw-orphan-list (pr#37805, J. Eric Ivancich)