Merge lp:~gandelman-a/ubuntu/quantal/nova/nova-2012.2.3-2 into lp:~openstack-ubuntu-testing/nova/folsom

[Adam Gandelman]

Another CVE was un-embargoed today for nova, we need to also supersede the nova package that was recently accepted into quantal-proposed.

=== modified file 'debian/changelog'
--- debian/changelog	2013-02-05 22:13:28 +0000
+++ debian/changelog	2013-02-21 20:54:20 +0000
@@ -1,3 +1,17 @@
+nova (2012.2.3+stable-20130221-d5e7f551-0ubuntu1) quantal-proposed; urgency=low
+
+  * Dropped patches, applied upstream:
+    - debian/patches/CVE-2013-1664.patch: [2ae74f8]
+  * Resynchronize with stable/folsom (d5e7f551) (LP: #1116671):
+    - [d5e7f55] nova-compute fails to start if an instance has no ip LP: 1131330
+    - [7ace55f] VMs paused unbeknownst to nova compute are destroyed LP: 1097806
+    - [ecd98d2] LibvirtBridgeDriver crashes when spawning an instance with
+      NoopFirewallDriver LP: 1050433
+    - [2ae74f8] DoS through XML entity expansion (CVE-2013-1664) LP: 1100282
+    - [21d5e90] Instance stuck in task state image_snapshot LP: 1101136
+
+ -- Adam Gandelman <[e-mail]>  Thu, 21 Feb 2013 12:40:55 -0400
+
 nova (2012.2.3-0ubuntu1) quantal-proposed; urgency=low
 
   * Dropped patches, applied upstream:
@@ -31,6 +45,15 @@
 
  -- Adam Gandelman <[e-mail]>  Tue, 05 Feb 2013 14:11:49 -0400
 
+nova (2012.2.1+stable-20121212-a99a802e-0ubuntu1.2) quantal-security; urgency=low
+
+  * SECURITY UPDATE: fix denial of service
+    - CVE-2013-1664.patch: Add a new utils.safe_minidom_parse_string function
+      and update external API facing Nova modules to use it
+    - CVE-2013-1664
+
+ -- Jamie Strandboge <[e-mail]>  Tue, 19 Feb 2013 11:41:25 -0600
+
 nova (2012.2.1+stable-20121212-a99a802e-0ubuntu1.1) quantal-security; urgency=low
 
   * SECURITY UPDATE: fix lack of authentication on block device used for