<div dir="ltr"><div style="font-family:arial,sans-serif;font-size:13px">Hello, everyone!</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">python-keystoneclient 0.7.0 and 0.7.1 were both released in the past 24 hours.</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">v0.7.0 [1] contains a pair of critical fixes, one of which is security related. The highlights include:</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed a critical security vulnerability (OSSA 2014-007 [2]) as detailed in bug 1282865 [3] and patched in bug 1289074 [4]. Deploying keystoneclient.middleware.auth_token with memcached as the caching backend in an environment using an unpatched thread module (i.e. failing to call `eventlet.patcher.monkey_patch(thread=True)`) no longer results in authentication contexts being "confused" between simultaneous requests.</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed a race condition in keystoneclient.middleware.auth_token for PKI deployments resulting in spurious 401 Unauthorized responses being returned to end users (bug 1285833 [5]).</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed an issue that resulted in leaving hanging connections to keystone (bug 1282089)</div><div style="font-family:arial,sans-serif;font-size:13px">

<br></div><div style="font-family:arial,sans-serif;font-size:13px">v0.7.1 [6] includes a workaround to allow the v3 Python library to work with deployments configured to advertise a v2.0-versioned identity endpoint in their service catalogs.</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Upgrading to the latest client is *strongly* recommended. As always, the latest client is available on PyPi [7].</div>

<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Thanks!</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">

[1] <a href="https://launchpad.net/python-keystoneclient/+milestone/0.7.0" target="_blank">https://launchpad.net/python-keystoneclient/+milestone/0.7.0</a></div><div style="font-family:arial,sans-serif;font-size:13px">[2] <a href="http://lists.openstack.org/pipermail/openstack/2014-March/006237.html" target="_blank">http://lists.openstack.org/pipermail/openstack/2014-March/006237.html</a></div>

<div style="font-family:arial,sans-serif;font-size:13px">[2] <a href="https://bugs.launchpad.net/bugs/1282865" target="_blank">https://bugs.launchpad.net/bugs/1282865</a></div><div style="font-family:arial,sans-serif;font-size:13px">

[3] <a href="https://bugs.launchpad.net/bugs/1289074" target="_blank">https://bugs.launchpad.net/bugs/1289074</a></div><div style="font-family:arial,sans-serif;font-size:13px">[4] <a href="https://bugs.launchpad.net/bugs/1285833" target="_blank">https://bugs.launchpad.net/bugs/1285833</a></div>

<div style="font-family:arial,sans-serif;font-size:13px">[5] <a href="https://launchpad.net/python-keystoneclient/+milestone/0.7.1" target="_blank">https://launchpad.net/python-keystoneclient/+milestone/0.7.1</a></div><div style="font-family:arial,sans-serif;font-size:13px">

[6] <a href="https://pypi.python.org/pypi/python-keystoneclient/" target="_blank">https://pypi.python.org/pypi/python-keystoneclient/</a></div></div>