<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 27, 2014 at 10:13 AM, Dolph Mathews <span dir="ltr"><<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div style="font-family:arial,sans-serif;font-size:13px">

Hello, everyone!</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">python-keystoneclient 0.7.0 and 0.7.1 were both released in the past 24 hours.</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">v0.7.0 [1] contains a pair of critical fixes, one of which is security related. The highlights include:</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed a critical security vulnerability (OSSA 2014-007 [2]) as detailed in bug 1282865 [3] and patched in bug 1289074 [4]. Deploying keystoneclient.middleware.auth_token with memcached as the caching backend in an environment using an unpatched thread module (i.e. failing to call `eventlet.patcher.monkey_patch(thread=True)`) no longer results in authentication contexts being "confused" between simultaneous requests.</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed a race condition in keystoneclient.middleware.auth_token for PKI deployments resulting in spurious 401 Unauthorized responses being returned to end users (bug 1285833 [5]).</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">- Fixed an issue that resulted in leaving hanging connections to keystone (bug 1282089)</div><div style="font-family:arial,sans-serif;font-size:13px">


<br></div><div style="font-family:arial,sans-serif;font-size:13px">v0.7.1 [6] includes a workaround to allow the v3 Python library to work with deployments configured to advertise a v2.0-versioned identity endpoint in their service catalogs.</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Upgrading to the latest client is *strongly* recommended. As always, the latest client is available on PyPi [7].</div>


<div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Thanks!</div></div>
</blockquote></div><div class="gmail_extra"><br></div>I just noticed that I numbered most of the links in the original footer incorrectly, as there are two [2] links, resulting in the rest being off by one.</div><div class="gmail_extra">

<br></div><div class="gmail_extra">The correct numbering as they correspond to the body:<div><br></div><div><div style="font-size:13px;font-family:arial,sans-serif">[1] <a href="https://launchpad.net/python-keystoneclient/+milestone/0.7.0" target="_blank">https://launchpad.net/python-keystoneclient/+milestone/0.7.0</a></div>

<div style="font-size:13px;font-family:arial,sans-serif">[2] <a href="http://lists.openstack.org/pipermail/openstack/2014-March/006237.html" target="_blank">http://lists.openstack.org/pipermail/openstack/2014-March/006237.html</a></div>

<div style="font-size:13px;font-family:arial,sans-serif">[3] <a href="https://bugs.launchpad.net/bugs/1282865" target="_blank">https://bugs.launchpad.net/bugs/1282865</a></div><div style="font-size:13px;font-family:arial,sans-serif">

[4] <a href="https://bugs.launchpad.net/bugs/1289074" target="_blank">https://bugs.launchpad.net/bugs/1289074</a></div><div style="font-size:13px;font-family:arial,sans-serif">[5] <a href="https://bugs.launchpad.net/bugs/1285833" target="_blank">https://bugs.launchpad.net/bugs/1285833</a></div>

<div style="font-size:13px;font-family:arial,sans-serif">[6] <a href="https://launchpad.net/python-keystoneclient/+milestone/0.7.1" target="_blank">https://launchpad.net/python-keystoneclient/+milestone/0.7.1</a></div><div style="font-size:13px;font-family:arial,sans-serif">

[7] <a href="https://pypi.python.org/pypi/python-keystoneclient/" target="_blank">https://pypi.python.org/pypi/python-keystoneclient/</a></div></div><div><br></div></div></div>