June 2016 - OpenStack-announce - lists.openstack.org

[new][openstackansible] openstack-ansible-ironic 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are stoked to announce the release of: openstack-ansible-ironic 13.1.3: Ironic Role for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-ironic 13.1.0..13.1.3 -------------------------------------------------- 9f17867 Role tests should test against the same branch b7de257 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 17 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-galera_server 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are overjoyed to announce the release of: openstack-ansible-galera_server 13.1.3: Galera Server role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-galera_server 13.1.0..13.1.3 --------------------------------------------------------- 26ec8e8 Role tests should test against the same branch 290e729 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 11 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index da55ba7..3307388 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -17,0 +18,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstack] cliff 2.1.0 release (newton)
by no-reply＠openstack.org 16 Jun '16

16 Jun '16

We are psyched to announce the release of: cliff 2.1.0: Command Line Interface Formulation Framework This release is part of the newton release series. With source available at: http://git.openstack.org/cgit/openstack/cliff With package available at: https://pypi.python.org/pypi/cliff Please report issues through launchpad: https://bugs.launchpad.net/python-cliff For more details, please see below. Changes in cliff 2.0.0..2.1.0 ----------------------------- 98b9b79 Updated from global requirements c69aff3 Update --max-width help 147858e Add more test coverage for shell formatter ab54121 Add more test coverage for CSV formatter 35232dd Support multiple sub commands in completion e850b87 Factorize more test data 432ad35 Factorize some test data 365bc52 Factorize common test code e5422c5 Factorize argparse importing 2b78acd Updated from global requirements 82c6ef7 Updated from global requirements c59f044 Add CLIFF_MAX_TERM_WIDTH envvar to complement --max-width 8377a98 Fix prettytable.PrettyTable().max_width wrong usage ec2a4c5 Fix AttributeError when entry point load failed 15f60bf Distinguish no existed columns in ShowOne a53dd4b Refactor HelpCommand 80f22a1 Updated from global requirements d171567 Remove httplib2 from test-requirements.txt 75165aa Sync help message for --help Diffstat (except docs and test files) ------------------------------------- cliff/app.py | 2 +- cliff/complete.py | 16 +- cliff/display.py | 21 +++ cliff/formatters/table.py | 20 +- cliff/help.py | 6 +- cliff/lister.py | 22 +-- cliff/show.py | 11 +- requirements.txt | 4 +- test-requirements.txt | 3 +- 17 files changed, 451 insertions(+), 140 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f334651..717f2d2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,2 +9,2 @@ six>=1.9.0 # MIT -stevedore>=1.5.0 # Apache-2.0 -unicodecsv>=0.8.0 # BSD +stevedore>=1.10.0 # Apache-2.0 +unicodecsv>=0.8.0;python_version<'3.0' # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 195063b..8f6106d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ nose # LGPL -mock>=1.2 # BSD +mock>=2.0 # BSD @@ -10 +9,0 @@ oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -httplib2>=0.7.5 # MIT

1 0

[new][monasca] monasca-common 1.0.0 release (newton)
by no-reply＠openstack.org 16 Jun '16

16 Jun '16

We are glad to announce the release of: monasca-common 1.0.0: Monasca common python modules This release is part of the newton release series. For more details, please see below. Changes in monasca-common 0.0.8..1.0.0 -------------------------------------- d000623 Move simport into monasca common b338b78 (Non)deterministic support for alarms 7d756be [monasca-common] Change tox to use https instead of git 932d25b Remove unnecessary executable permissions 741a24e [monasca-common] Constraint tox targets with upper-constraints 082787e Add unit tests for common rest.utils module bfc88d4 Add unit tests for common Kafka module 64558a1 Add Period to hibernate notification method 896817f Log the end of the token which varies by token b1b3b3f Don't log the entire token if auth failure 5c73077 FIX handling json data with multibyte characters 8f729c4 Invalid kafka check script name 94882c2 Remove sphinx requires from test-requirements Diffstat (except docs and test files) ------------------------------------- .../common/hibernate/db/NotificationMethodDb.java | 30 ++++ .../common/hibernate/db/SubAlarmDefinitionDb.java | 31 +++- .../monasca/common/middleware/HttpAuthClient.java | 6 +- .../java/monasca/common/middleware/TokenAuth.java | 2 +- .../common/model/alarm/AlarmExpression.java | 26 +++- .../common/model/alarm/AlarmSubExpression.java | 46 +++++- .../model/alarm/AlarmSubExpressionListener.java | 26 +++- .../monasca/common/model/alarm/AlarmExpression.g4 | 10 +- .../common/model/alarm/AlarmExpressionTest.java | 70 ++++++++- .../common/model/alarm/AlarmSubExpressionTest.java | 27 +++- monasca_common/__init__.py | 0 monasca_common/healthcheck/checks/kafka.py | 103 ------------- monasca_common/healthcheck/checks/kafka_check.py | 103 +++++++++++++ monasca_common/repositories/constants.py | 0 monasca_common/repositories/exceptions.py | 0 monasca_common/rest/utils.py | 2 +- monasca_common/simport/__init__.py | 0 monasca_common/simport/simport.py | 107 +++++++++++++ test-requirements.txt | 8 +- tools/tox_install.sh | 57 +++++++ tox.ini | 7 +- 27 files changed, 932 insertions(+), 143 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0217a59..b09464c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,2 +12,0 @@ nose -# Docs Requirements -oslosphinx @@ -17,4 +14,0 @@ python-subunit>=0.0.18 -sphinx>=1.1.2,!=1.2.0,<1.3 -sphinxcontrib-docbookrestapi -sphinxcontrib-httpdomain -sphinxcontrib-pecanwsme>=0.8 @@ -23 +17 @@ testscenarios>=0.4 -testtools>=0.9.34 \ No newline at end of file +testtools>=0.9.34

1 0

[new] yaql 1.1.1 release (mitaka)
by no-reply＠openstack.org 14 Jun '16

14 Jun '16

We are overjoyed to announce the release of: yaql 1.1.1: YAQL - Yet Another Query Language This release is part of the mitaka stable release series. With package available at: https://pypi.python.org/pypi/yaql For more details, please see below. Changes in yaql 1.1.0..1.1.1 ---------------------------- 9d6866e Fix string operators >= and <= 9a5c03a Extend .slice() method implementation to all Iterables d01a78c Fix typo in YAML example 198f774 Python 3 compatibility issues were fixed Diffstat (except docs and test files) ------------------------------------- yaql/language/specs.py | 4 ++-- yaql/standard_library/queries.py | 1 + yaql/standard_library/strings.py | 4 ++-- 5 files changed, 9 insertions(+), 5 deletions(-)

1 0

[new][zaqar] python-zaqarclient 1.1.0 release (newton)
by no-reply＠openstack.org 14 Jun '16

14 Jun '16

We are gleeful to announce the release of: python-zaqarclient 1.1.0: Client Library for OpenStack Zaqar Messaging API This release is part of the newton release series. With source available at: https://git.openstack.org/cgit/openstack/python-zaqarclient With package available at: https://pypi.python.org/pypi/python-zaqarclient Please report issues through launchpad: https://bugs.launchpad.net/python-zaqarclient For more details, please see below. Changes in python-zaqarclient 1.0.0..1.1.0 ------------------------------------------ 2854847 Add update queue function in v2 1ef277f Fix the zaqar functional test job eeba0f3 Ensure the float value of api version could work c18c300 Updated from global requirements 4d256db Refactor queue create 15ef338 Support /ping and /health for v2 80adf49 Fix tests related to queue attributes in API V2 9fd9e14 Use v2 as the default cli version 20f54aa Remove pypy support Diffstat (except docs and test files) ------------------------------------- requirements.txt | 6 +- setup.cfg | 5 +- test-requirements.txt | 2 +- tox.ini | 2 +- zaqarclient/queues/cli.py | 2 +- zaqarclient/queues/client.py | 5 ++ zaqarclient/queues/v1/cli.py | 7 +- zaqarclient/queues/v1/client.py | 3 +- zaqarclient/queues/v1/queues.py | 15 ++-- zaqarclient/queues/v2/api.py | 10 +++ zaqarclient/queues/v2/cli.py | 33 +++++++ zaqarclient/queues/v2/client.py | 11 +++ zaqarclient/queues/v2/core.py | 64 ++++++++++++++ zaqarclient/queues/v2/queues.py | 50 +++++++++++ zaqarclient/transport/http.py | 8 +- zaqarclient/transport/request.py | 7 +- 23 files changed, 492 insertions(+), 41 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fcbf382..0b54533 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr>=1.6 # Apache-2.0 -requests!=2.9.0,>=2.8.1 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 @@ -7 +7 @@ six>=1.9.0 # MIT -stevedore>=1.5.0 # Apache-2.0 +stevedore>=1.10.0 # Apache-2.0 @@ -13 +13 @@ oslo.i18n>=2.1.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.7.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index ffaa87b..07545c8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ discover # BSD -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD

1 0

[OSSA-2016-009] Neutron IPTables firewall anti-spoof protection bypass (CVE-2016-5362, CVE-2016-5363, CVE-2015-8914)
by Tristan Cacqueray 14 Jun '16

14 Jun '16

===================================================================== OSSA-2016-009: Neutron IPTables firewall anti-spoof protection bypass ===================================================================== :Date: June 14, 2016 :CVE: CVE-2016-5362 (DHCP spoofing), CVE-2016-5363 (MAC source address spoofing), CVE-2015-8914 (ICMPv6 source address spoofing) Affects ~~~~~~~ - Neutron: <=7.0.4, >=8.0.0 <=8.1.0 Description ~~~~~~~~~~~ Romain Aviolat from Nagravision and Dustin Lundquist from Blue Box Group, Inc independently reported vulnerabilities in Neutron anti- spoof protection. By forging DHCP discovery messages or non-IP traffic, such as ARP or ICMPv6, an instance may spoof IP or MAC source addresses on attached networks resulting in denial of services and/or traffic interception. Moreover when L2population isn't used, other tenants attached to a shared network are also vulnerable. Neutron setups using the IPTables firewall driver are affected. Patches ~~~~~~~ - https://review.openstack.org/299025 (MAC) (Liberty) - https://review.openstack.org/303572 (DHCP) (Liberty) - https://review.openstack.org/310652 (ICMPv6) (Liberty) - https://review.openstack.org/299023 (MAC) (Mitaka) - https://review.openstack.org/303563 (DHCP) (Mitaka) - https://review.openstack.org/310648 (ICMPv6) (Mitaka) - https://review.openstack.org/299021 (MAC) (Newton) - https://review.openstack.org/300202 (DHCP) (Newton) - https://review.openstack.org/300233 (ICMPv6) (Newton) Credits ~~~~~~~ - Romain Aviolat from Nagravision (CVE-2015-8914) - Dustin Lundquist from Blue Box Group, Inc (CVE-2016-5362, CVE-2016-5363) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1502933 (ICMPv6) - https://bugs.launchpad.net/bugs/1558658 (MAC, DHCP) - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5362 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5363 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8914 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[new][ironic] python-ironicclient 0.8.2 release (liberty)
by no-reply＠openstack.org 13 Jun '16

13 Jun '16

We are delighted to announce the release of: python-ironicclient 0.8.2: OpenStack Bare Metal Provisioning API Client Library This release is part of the liberty stable release series. With source available at: http://git.openstack.org/cgit/openstack/python-ironicclient With package available at: https://pypi.python.org/pypi/python-ironicclient Please report issues through launchpad: http://bugs.launchpad.net/python-ironicclient For more details, please see below. Changes in python-ironicclient 0.8.1..0.8.2 ------------------------------------------- ae2c099 Scale back on how many warnings we issue 6d782fd Updated from global requirements 5a70a3f Update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironicclient/common/http.py | 3 +-- requirements.txt | 2 +- setup.py | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7203d39..30b3c01 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0,>=1.6 +pbr>=1.6

1 0

[new][neutron] neutron-vpnaas 8.1.2 release (mitaka)
by no-reply＠openstack.org 10 Jun '16

10 Jun '16

We are tickled pink to announce the release of: neutron-vpnaas 8.1.2: OpenStack Networking VPN as a Service This release is part of the mitaka stable release series. For more details, please see below. Changes in neutron-vpnaas 8.1.0..8.1.2 -------------------------------------- caab92d Fix grenade plugin 1d48dcd Add grenade upgrade hooks to stop agent bede3a3 Set path for neutron conf dir in devstack if missing 58a5251 Ensure that PK values don't default to NULL 15b9c3d OpenSwan: handle disconnect properly for multiple subnets 1123c55 VPNaaS returns 500 INTERNAL error with long names, descriptions Diffstat (except docs and test files) ------------------------------------- devstack/settings | 1 + devstack/upgrade/resources.sh | 14 +++++++++ devstack/upgrade/settings | 1 + devstack/upgrade/shutdown.sh | 36 ++++++++++++++++++++++ devstack/upgrade/upgrade.sh | 14 +++++++++ .../contract/56893333aa52_fix_identifier_map_fk.py | 2 +- neutron_vpnaas/extensions/vpnaas.py | 16 +++++----- .../services/vpn/device_drivers/ipsec.py | 28 +++++++++++++++-- .../unit/services/vpn/device_drivers/test_ipsec.py | 20 ++++++++++++ 10 files changed, 149 insertions(+), 12 deletions(-)

1 0

[new][neutron] neutron-lbaas 8.1.2 release (mitaka)
by no-reply＠openstack.org 10 Jun '16

10 Jun '16

We are gleeful to announce the release of: neutron-lbaas 8.1.2: OpenStack Networking Load Balancing as a Service This release is part of the mitaka stable release series. For more details, please see below. Changes in neutron-lbaas 8.0.0..8.1.2 ------------------------------------- 5bcc99d correct tox.ini for coverage e866e9f Updated from global requirements 5f6794b Put sanity back into lbaas jobs Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 +- tox.ini | 23 ++++++++++------------- 3 files changed, 18 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 68c50a0..62b6e44 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ coverage>=3.6 # Apache-2.0 -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD

1 0