On 7/4/19 10:16 AM, Song Gao song (高松) wrote:
Yes, it has been fixed, but cannot be directly used because maybe the related novaclient or cinderclient project need to upgrade at the same time. It seems that the only solution is to add patch to the starlingx/upstream r2018.10 branch, isn't it?
If you need to continue with that release, yes you will need to backport whatever patches you need. pike is on 'extended maintenance' upstream so nothing that is not a CVE will get fixed there now. If the fix also depends on other client libs you will need to bring those down too. Is this fix required for the internal operations of StarlingX? ie, is it the puppet or other internal code that needs it, or is it for your administrative uses that you need it? If it is for admin use, you can install OSC 3.19.0 into a virtual env, even on a controller if necessary, and use it directly. dt -- Dean Troyer dtroyer@gmail.com