Open Stack

We eagerly announce the release of:

swift 2.19.2: OpenStack Object Storage

This release is part of the rocky stable release series.

The source is available from:

    https://opendev.org/openstack/swift

Download the package from:

    https://tarballs.openstack.org/null/

Please report issues through:

    https://bugs.launchpad.net/swift/+bugs

For more details, please see below.

2.19.2
^^^^^^

Bug Fixes

* Sharding improvements

  * The "container-replicator" now only attempts to fetch shard
    ranges if the remote indicates that it has shard ranges. Further,
    it does so with a timeout to prevent the process from hanging in
    certain cases.

  * The "container-replicator" now correctly enqueues "container-
    reconciler" work for sharded containers.

* S3 API improvements

  * Fixed an issue where v4 signatures would not be validated
    against the body of the request, allowing a replay attack if
    request headers were captured by a malicious third party. Note
    that unsigned payloads still function normally.

  * CompleteMultipartUpload requests with a "Content-MD5" now work.

  * Fixed v1 listings that end with a non-ASCII object name.

  * Multipart object segments are now actually deleted when the
    multipart object is deleted via the S3 API.

  * Fixed an issue that caused Delete Multiple Objects requests with
    large bodies to 400. This was previously fixed in 2.20.0.

  * Fixed an issue where non-ASCII Keystone EC2 credentials would
    not get mapped to the correct account. This was previously fixed
    in 2.20.0.

* Background corruption-detection improvements

  * Detect and remove invalid entries from "hashes.pkl"

  * When object path is not a directory, just quarantine it, rather
    than the whole suffix.

* Fixed a bug where encryption would store the incorrect key
  metadata if the object name starts with a slash.

* Fixed an issue where an object server failure during a client
  download could leave an open socket between the proxy and client.

* Static Large Object sizes in listings for versioned containers are
  now more accurate.

* When refetching Static Large Object manifests, non-manifest
  responses are now handled better.

* Cross-account symlinks now store correct account information in
  container listings. This was previously fixed in 2.22.0.

* Requesting multiple ranges from a Dynamic Large Object now returns
  the entire object instead of incorrect data. This was previously
  fixed in 2.23.0.

* When making backend requests, the "proxy-server" now ensures query
  parameters are always properly quoted. Previously, the proxy would
  encounter an error on Python 2.7.17 if the client included non-ASCII
  query parameters in object requests. This was previously fixed in
  2.23.0.

Changes in swift 2.19.1..2.19.2
-------------------------------

5aa4c5d88 Authors/changelog for 2.19.2
52fa1a65a Fix stable gate
345f2b542 Only url-quote Keys when encoding-type=url
187380e60 slo: Better handle non-manifest responses when refetching manifest
f68bbae9c versioned_writes: checks for SLO object before copy
b3cd51008 Fix quarantine when object path is not a directory
b90c87158 Remove invalid dict entries from hashes.pkl
52b3bae44 reconciler: Enqueue right work for shard containers
6a02cac44 dlo: Respond 200 on multi-range GETs
41890e558 sharding: better handle get_shard_ranges failures
7d90c5bde container-replicator: Add a timeout for get_shard_ranges
e3739920c Fix socket leak on object-server death
4af86c78f Fix decryption for broken objects
8fc622b28 encryption: Stop being cutesy with os.path.join()
b7d83141a Fix incorrect setting of symlink_target_account
423f96293 Verify client input for v4 signatures
9bcce90be s3api: Delete multipart uploads via multi-delete
82f049822 fix documentation of default
760efd1fe Unquote URL before using splited parts.
6b8c333ef s3api: Increase max body size for Delete Multiple Objects requests
c33fdf51e s3api: Block ETag header from CompleteMultipartUpload requests
a24746003 Modifying URL errors in installation deployment documents
74f1093ca doc: Fix the swift middleware doc needs more info  to set s3 api
b164767dc bufferedhttp: ensure query params are properly quoted
35e4628c6 py2/3: Stop using stdlib's putrequest(); it only does ASCII
2b07dfe72 Remove openSUSE 42.3 job
6f3a53ee9 Fixing broken links
b26aad755 OpenDev Migration Patch
2e7e0bd4b Imported Translations from Zanata


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   2 +-
.mailmap                                           |   3 +-
.zuul.yaml                                         |  67 +++---
AUTHORS                                            |  11 +-
CHANGELOG                                          |  65 ++++++
.../finalize-installation-ubuntu-debian.rst        |   2 +-
.../install/storage-install-ubuntu-debian.rst      |   6 +-
.../notes/2_19_2_release-82962ca2a81f9c4e.yaml     |  73 +++++++
swift/common/bufferedhttp.py                       |  11 +-
swift/common/db_replicator.py                      |   2 +-
swift/common/exceptions.py                         |   4 +
swift/common/middleware/crypto/keymaster.py        |  59 ++++--
swift/common/middleware/dlo.py                     |   2 +
.../common/middleware/s3api/controllers/bucket.py  |  27 ++-
.../middleware/s3api/controllers/multi_delete.py   |  39 +++-
.../middleware/s3api/controllers/multi_upload.py   |  28 ++-
swift/common/middleware/s3api/etree.py             |  13 +-
swift/common/middleware/s3api/s3api.py             |  83 ++++++--
swift/common/middleware/s3api/s3request.py         |  60 +++++-
swift/common/middleware/s3api/s3token.py           |   2 +-
swift/common/middleware/slo.py                     |  43 +++-
swift/common/middleware/symlink.py                 |   2 +-
swift/common/middleware/versioned_writes.py        |   7 +-
swift/container/reconciler.py                      |   4 +-
swift/container/replicator.py                      |   7 +-
swift/locale/ko_KR/LC_MESSAGES/swift.po            |  92 ++++++++-
swift/obj/diskfile.py                              |  24 ++-
swift/proxy/controllers/base.py                    |  69 +++++--
test/functional/s3api/test_multi_delete.py         |  16 +-
test/functional/s3api/test_multi_upload.py         |  24 ++-
test/functional/swift_test_client.py               |  87 ++++++++
test/functional/test_dlo.py                        |   9 +
test/functional/test_versioned_writes.py           |  41 ++++
test/unit/__init__.py                              |  27 ++-
.../common/middleware/crypto/test_encryption.py    |   2 +-
.../common/middleware/crypto/test_keymaster.py     | 168 +++++++++++++--
test/unit/common/middleware/s3api/helpers.py       |   3 +
test/unit/common/middleware/s3api/test_bucket.py   |  30 ++-
.../common/middleware/s3api/test_multi_delete.py   |  37 +++-
.../common/middleware/s3api/test_multi_upload.py   |   4 +-
test/unit/common/middleware/s3api/test_obj.py      |  82 ++++++++
.../unit/common/middleware/s3api/test_s3request.py |  77 ++++++-
test/unit/common/middleware/s3api/test_s3token.py  |  44 ++++
test/unit/common/middleware/test_dlo.py            |   6 +-
test/unit/common/middleware/test_slo.py            | 158 +++++++++++++++
test/unit/common/test_bufferedhttp.py              |   5 +-
test/unit/container/test_replicator.py             | 197 ++++++++++++++++--
test/unit/obj/test_diskfile.py                     |   9 +-
test/unit/proxy/test_mem_server.py                 |   6 +
test/unit/proxy/test_server.py                     | 225 +++++++++++++++++----
tox.ini                                            |   5 +
61 files changed, 1850 insertions(+), 245 deletions(-)