September 2015 - OpenStack-announce

[OSSA 2015-017] Nova may fail to delete images in resize state (CVE-2015-3280)
by Tristan Cacqueray 01 Sep '15

01 Sep '15

============================================================= OSSA-2015-017: Nova may fail to delete images in resize state ============================================================= :Date: September 01, 2015 :CVE: CVE-2015-3280 Affects ~~~~~~~ - Nova: 2014.2 versions through 2014.2.3, and 2015.1 versions through 2015.1.1 Description ~~~~~~~~~~~ George Shuklin from Webzilla LTD and Tushar Patil from NTT DATA, Inc independently reported a vulnerability in Nova resize state. If an authenticated user deletes an instance while it is in resize state, it will cause the original instance to not be deleted from the compute node it was running on. An attacker can use this to launch a denial of service attack. All Nova setups are affected. Patches ~~~~~~~ - https://review.openstack.org/219301 (Juno) - https://review.openstack.org/219300 (Kilo) - https://review.openstack.org/219299 (Liberty) Credits ~~~~~~~ - George Shuklin from Webzilla LTD (CVE-2015-3280) - Tushar Patil from NTT Data (CVE-2015-3280) References ~~~~~~~~~~ - https://launchpad.net/bugs/1392527 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3280 Notes ~~~~~ - This fix will be included in future 2014.2.4 (juno) and 2015.1.2 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][oslo] oslo.service release 0.9.0 (liberty)
by davanum＠gmail.com 01 Sep '15

01 Sep '15

We are psyched to announce the release of: oslo.service 0.9.0: oslo.service library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.service With package available at: https://pypi.python.org/pypi/oslo.service For more details, please see the git log history below and: http://launchpad.net/oslo.service/+milestone/0.9.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.service Changes in oslo.service 0.8.0..0.9.0 ------------------------------------ fad5b04 Handling corner cases in dynamic looping call bbfcde1 Change DEBUG log in loopingcall to TRACE level log 5891908 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_service/loopingcall.py | 23 +++++++++++++++++++---- requirements.txt | 2 +- 3 files changed, 44 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6206e8e..54c954a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ oslo.concurrency>=2.3.0 # Apache-2.0 -oslo.config>=2.1.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[release][oslo] oslo.vmware release 1.21.0 (liberty)
by davanum＠gmail.com 01 Sep '15

01 Sep '15

We are psyched to announce the release of: oslo.vmware 1.21.0: Oslo VMware library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.vmware With package available at: https://pypi.python.org/pypi/oslo.vmware For more details, please see the git log history below and: http://launchpad.net/oslo.vmware/+milestone/1.21.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.vmware Changes in oslo.vmware 1.20.0..1.21.0 ------------------------------------- f1e117d Updated from global requirements c47cfdc Use SSL thumbprints for NFC transfer d014675 Updated from global requirements 0a0e7e8 Update bandit.yaml to the latest Diffstat (except docs and test files) ------------------------------------- bandit.yaml | 125 ++++++++++++++++++++++++++++++++--- oslo_vmware/objects/datastore.py | 5 +- oslo_vmware/rw_handles.py | 94 +++++++++++++------------- oslo_vmware/service.py | 4 +- requirements.txt | 4 +- tox.ini | 2 +- 7 files changed, 199 insertions(+), 78 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 69356a9..200a2c0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0,>=1.4 +pbr<2.0,>=1.6 @@ -8 +8 @@ stevedore>=1.5.0 # Apache-2.0 -netaddr>=0.7.12 +netaddr!=0.7.16,>=0.7.12

1 0

[release][oslo] oslo.config release 2.4.0 (liberty)
by davanum＠gmail.com 01 Sep '15

01 Sep '15

We are jazzed to announce the release of: oslo.config 2.4.0: Oslo Configuration API This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.config With package available at: https://pypi.python.org/pypi/oslo.config For more details, please see the git log history below and: http://launchpad.net/oslo.config/+milestone/2.4.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.config Changes in oslo.config 2.3.0..2.4.0 ----------------------------------- 7a9f4e7 Updated from global requirements 85eee67 Make Integer type class honor zero for min/max Diffstat (except docs and test files) ------------------------------------- oslo_config/types.py | 10 +++++----- requirements.txt | 2 +- 3 files changed, 42 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b020ba8..bab88ce 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ argparse -netaddr>=0.7.12 +netaddr!=0.7.16,>=0.7.12

1 0

[release][sahara] python-saharaclient release 0.11.0 (liberty)
by doug＠doughellmann.com 01 Sep '15

01 Sep '15

We are glad to announce the release of: python-saharaclient 0.11.0: Client library for Sahara API This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/python-saharaclient With package available at: https://pypi.python.org/pypi/python-saharaclient For more details, please see the git log history below and: http://launchpad.net/python-saharaclient/+milestone/0.11.0 Please report issues through launchpad: http://bugs.launchpad.net/python-saharaclient Changes in python-saharaclient 0.10.1..0.11.0 --------------------------------------------- d7dae5e Updated from global requirements 3b2bfbb Support updates and ACL for objects 22688f0 Updated from global requirements d1ca351 Updated from global requirements 0e01b48 Improve help strings 44b02db Fixing query string for multiple opts c3fa053 Updated from global requirements 95e29fd Adding Data Sources support to CLI f0a3abe Add initial commit for integration with Openstackclient 298bc20 Add support OS_ENDPOINT_TYPE env variable to CLI Diffstat (except docs and test files) ------------------------------------- requirements.txt | 8 +- saharaclient/api/base.py | 20 +- saharaclient/api/cluster_templates.py | 18 +- saharaclient/api/clusters.py | 16 +- saharaclient/api/data_sources.py | 7 +- saharaclient/api/job_binaries.py | 6 +- saharaclient/api/job_binary_internals.py | 9 + saharaclient/api/job_executions.py | 14 +- saharaclient/api/jobs.py | 9 + saharaclient/api/node_group_templates.py | 15 +- saharaclient/api/shell.py | 14 +- saharaclient/osc/__init__.py | 0 saharaclient/osc/plugin.py | 57 ++++++ saharaclient/osc/v1/__init__.py | 0 saharaclient/osc/v1/data_sources.py | 179 ++++++++++++++++++ saharaclient/osc/v1/plugins.py | 135 ++++++++++++++ saharaclient/osc/v1/utils.py | 43 +++++ saharaclient/shell.py | 4 +- setup.cfg | 16 +- test-requirements.txt | 2 +- 31 files changed, 1111 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a306909..dd734cb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0,>=1.4 +pbr<2.0,>=1.6 @@ -8 +8,2 @@ Babel>=1.3 -netaddr>=0.7.12 +cliff>=1.14.0 # Apache-2.0 +netaddr!=0.7.16,>=0.7.12 @@ -10 +11 @@ oslo.i18n>=1.5.0 # Apache-2.0 -oslo.utils>=1.9.0 # Apache-2.0 +oslo.utils>=2.0.0 # Apache-2.0 @@ -11,0 +13 @@ python-keystoneclient>=1.6.0 +python-openstackclient>=1.5.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2a306df..0158543 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ mock>=1.2 -oslo.config>=1.11.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[Swift] Swift 2.4.0 release
by John Dickinson 01 Sep '15

01 Sep '15

I'm pleased to announce that Swift 2.4.0 is available. As always, you can upgrade to this version with no end-user downtime. This release has several very nice features, so I recommend that you upgrade as soon as possible. You can find the release at: https://launchpad.net/swift/liberty/2.4.0 Please note the dependency and config changes in the full release notes: https://github.com/openstack/swift/blob/master/CHANGELOG This release is the result of 55 code contributors, including 29 first-time code contributors. These are the first-time code contributors: Timur Alperovich Kazuhiro Miyahara Minwoo Bae Takashi Natsume Tim Burke Ondrej Novy Carlos Cavanna Falk Reimann Emmanuel Cazenave Brian Reitz Clément Contini Eran Rom Oshrit Feder Hamdi Roumani Charles Hsu Atsushi Sakai Joanna H. Huang Azhagu Selvan SP Bill Huber Alexandra Settle Jaivish Kothari Pradeep Kumar Singh Zhao Lei Victor Stinner Ben Martin Akihito Takai Kenichiro Matsuda Kai Zhang Michael Matur I'd like to call out a few significant changes in this release. Please read the release notes in the link above for more information about these new features. * Allow one or more object servers per disk deployment This new deployment model allows you to set the number of object servers per drive. The basic change is that you add every drive into the ring at a different port, and Swift will automatically run the configured number of server processes for each drive. This results in per-disk isolated IO so that one slow disk does not slow down every operation to that server. This change can dramatically lower request latency and increase requests per second. * Improve performance for object writes to large containers When an object is written in Swift, the object servers will attempt to update the listing in the appropriate container server before giving a response to the client. If the container server is busy, object latency increases as the object server waits for the container server. In this release, the object server waits less time (and the wait time is configurable) for the container server response, thus lowering overall latency. Effectively, this means that object writes will no longer get slower as the number of objects in a container increases. * Users can set per-object metadata with bulk upload Bulk uploads allow users to upload an archive (.tar) to Swift and store the individual referenced files as separate objects in the system. Swift now observes extended attributes set on these files and appropriately sets user metadata on the stored objects. * Allow SLO PUTs to forgo per-segment integrity checks. Previously, each segment referenced in the manifest also needed the correct etag and bytes setting. These fields now allow the "null" value to skip those particular checks on the given segment. There are many other changes that have gone into this release. I encourage you to review the release notes and upgrade to this release. Thank you to everyone who contributed to this release. If you would like to get involved in Swift, please join us in #openstack-swift on freenode IRC. --John

1 0