[CLOUDSTACK-10230] User is able to change to “Guest OS type” that has been removed

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 4.12
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Rafael Weingärtner
• Reporter: Rafael Weingärtner
• Created: 12/Jan/18 14:39
• Updated: 09/May/18 10:00
• Resolved: 12/Apr/18 10:12

Description

Users are able to change the OS type of VMs to “Guest OS type” that has been removed. This becomes a security issue when we try to force users to use HVM VMs (Meltdown/Spectre thing). A removed “guest os type” should not be usable by any users in the cloud.

Issue Links

• links to: GitHub Pull Request #2404