- OpenStack-announce - lists.openstack.org

[release][oslo] oslo.cache release 0.5.0 (liberty)
by davanum＠gmail.com 04 Aug '15

04 Aug '15

We are glad to announce the release of: oslo.cache 0.5.0: Cache storage for Openstack projects. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.cache With package available at: https://pypi.python.org/pypi/oslo.cache For more details, please see the git log history below and: http://launchpad.net/oslo.cache/+milestone/0.5.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.cache Changes in oslo.cache 0.4.0..0.5.0 ---------------------------------- 640b000 Updated from global requirements 1d2506c Updated from global requirements d1c7d06 Remove NoOp cache from oslo.cache Diffstat (except docs and test files) ------------------------------------- oslo_cache/_opts.py | 2 +- oslo_cache/backends/noop.py | 54 ------------------------------------------ requirements.txt | 4 ++-- test-requirements.txt | 2 +- 5 files changed, 4 insertions(+), 87 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d2bd1d5..5bd5530 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ Babel>=1.3 -dogpile.cache>=0.5.3 +dogpile.cache>=0.5.4 @@ -12 +12 @@ oslo.utils>=1.9.0 # Apache-2.0 -python-memcached>=1.48 +python-memcached>=1.56 diff --git a/test-requirements.txt b/test-requirements.txt index 773ccda..78c8759 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ mock>=1.2 -oslotest>=1.7.0 # Apache-2.0 +oslotest>=1.9.0 # Apache-2.0

1 0

[release][oslo] mox3 release 0.9.0 (liberty)
by davanum＠gmail.com 04 Aug '15

04 Aug '15

We are glad to announce the release of: mox3 0.9.0: Mock object framework for Python This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/mox3 With package available at: https://pypi.python.org/pypi/mox3 For more details, please see the git log history below and: http://launchpad.net/python-mox3/+milestone/0.9.0 Please report issues through launchpad: http://bugs.launchpad.net/python-mox3 Changes in mox3 0.8.0..0.9.0 ---------------------------- 8302c18 Updated from global requirements 0f173dd Updated from global requirements f43d4ea Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 4 ++-- setup.py | 3 +-- test-requirements.txt | 8 ++++---- 3 files changed, 7 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a418d02..d933200 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=0.11,<2.0 +pbr<2.0,>=1.3 @@ -6 +6 @@ pbr>=0.11,<2.0 -fixtures>=0.3.14 +fixtures>=1.3.1 diff --git a/test-requirements.txt b/test-requirements.txt index c670c85..22f6480 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ pyflakes==0.8.1 -flake8>=2.2.4,<=2.4.1 +flake8<=2.4.1,>=2.2.4 @@ -15 +15 @@ testrepository>=0.0.18 -testtools>=0.9.36,!=1.2.0 +testtools>=1.4.0 @@ -20,2 +20,2 @@ six>=1.9.0 -sphinx>=1.1.2,!=1.2.0,!=1.3b1,<1.3 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 +oslosphinx>=2.5.0 # Apache-2.0

1 0

[release][oslo] futurist release 0.3.0 (liberty)
by davanum＠gmail.com 04 Aug '15

04 Aug '15

We are glad to announce the release of: futurist 0.3.0: Useful additions to futures, from the future. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/futurist With package available at: https://pypi.python.org/pypi/futurist For more details, please see the git log history below and: http://launchpad.net/futurist/+milestone/0.3.0 Please report issues through launchpad: http://bugs.launchpad.net/futurist Changes in futurist 0.2.0..0.3.0 -------------------------------- 1151635 Updated from global requirements 7a7059d Allow providing a callback to certain executors to reject new work 4c9bf38 Disallow running 'start' twice c47a0c0 Allow for providing custom 'on_failure' callbacks 3f0732c Delegate failure capturing to a object that is returned on run Diffstat (except docs and test files) ------------------------------------- futurist/__init__.py | 2 + futurist/_futures.py | 57 ++++++++++++++++- futurist/_utils.py | 22 +++++++ futurist/periodics.py | 129 ++++++++++++++++++++++++++++++++------- futurist/rejection.py | 32 ++++++++++ test-requirements.txt | 2 +- 8 files changed, 238 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c17aa34..40569fe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.7.0 # Apache-2.0 +oslotest>=1.9.0 # Apache-2.0

1 0

[release][oslo] debtcollector release 0.7.0 (liberty)
by davanum＠gmail.com 04 Aug '15

04 Aug '15

We are excited to announce the release of: debtcollector 0.7.0: A collection of Python deprecation patterns and strategies that help you collect your technical debt in a non- destructive manner. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/debtcollector With package available at: https://pypi.python.org/pypi/debtcollector For more details, please see the git log history below and: http://launchpad.net/debtcollector/+milestone/0.7.0 Please report issues through launchpad: http://bugs.launchpad.net/debtcollector Changes in debtcollector 0.6.0..0.7.0 ------------------------------------- d44a4d2 Updated from global requirements 9079997 Expose a top level 'deprecate' function 1d97c0b Add @removals.removed_kwarg on an __init__ method 347369e Improve + test keyword argument @classmethod removal 5158725 Add example for removing a @classmethod Diffstat (except docs and test files) ------------------------------------- debtcollector/__init__.py | 29 +++++++++++ debtcollector/removals.py | 18 +++---- test-requirements.txt | 2 +- tox.ini | 1 - 7 files changed, 155 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3e77e7a..80f297d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.7.0 # Apache-2.0 +oslotest>=1.9.0 # Apache-2.0

1 0

[release][oslo] automaton release 0.6.0 (liberty)
by davanum＠gmail.com 04 Aug '15

04 Aug '15

We are pumped to announce the release of: automaton 0.6.0: Friendly state machines for python. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/automaton With package available at: https://pypi.python.org/pypi/automaton For more details, please see the git log history below and: http://launchpad.net/automaton/+milestone/0.6.0 Please report issues through launchpad: http://bugs.launchpad.net/automaton Changes in automaton 0.5.0..0.6.0 --------------------------------- b61e55a Activate pep8 check that _ is imported e64d7b3 Updated from global requirements b6f1dc0 Allow providing a state-name translation dict Diffstat (except docs and test files) ------------------------------------- automaton/converters/pydot.py | 14 +++++++++++--- test-requirements.txt | 2 +- tox.ini | 1 - 3 files changed, 12 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 14c39c2..7fccaac 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.7.0 # Apache-2.0 +oslotest>=1.9.0 # Apache-2.0

1 0

OpenStack 2015.1.1 released
by Alan Pevec 03 Aug '15

03 Aug '15

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the release of the 2015.1.1 stable Kilo release. We have been busy reviewing and accepting backported bugfixes to the stable/kilo branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 162 bugs have been fixed across all projects. These updates to Kilo are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/kilo/2015.1.1 https://launchpad.net/cinder/kilo/2015.1.1 https://launchpad.net/glance/kilo/2015.1.1 https://launchpad.net/heat/kilo/2015.1.1 https://launchpad.net/horizon/kilo/2015.1.1 https://launchpad.net/ironic/kilo/2015.1.1 https://launchpad.net/keystone/kilo/2015.1.1 https://launchpad.net/neutron/kilo/2015.1.1 https://launchpad.net/nova/kilo/2015.1.1 https://launchpad.net/sahara/kilo/2015.1.1 OpenStack Database Service (Trove) did not have stable/kilo fixes at this time and will skip 2015.1.1 release. Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2015.1.1 Thanks, Alan

1 0

OpenStack Community Weekly Newsletter (July 24 - 31)
by Nicole Martinelli 03 Aug '15

03 Aug '15

1 0

[release] Liberty-2 development milestone
by Thierry Carrez 31 Jul '15

31 Jul '15

Hello everyone, The second milestone of the Liberty development cycle, "liberty-2", marks the middle of the Liberty development cycle. It is now reached for projects following the milestone-based release schedule. The release management team directly manages a number of such OpenStack projects, for which it published tarballs corresponding to the milestone. You can find those source tarball downloads, as well as the full list of new features and fixed bugs, at: https://launchpad.net/keystone/liberty/liberty-2 (8.0.0.0b2) https://launchpad.net/glance/liberty/liberty-2 (11.0.0.0b2) https://launchpad.net/nova/liberty/liberty-2 (12.0.0.0b2) https://launchpad.net/horizon/liberty/liberty-2 (8.0.0.0b2) https://launchpad.net/neutron/liberty/liberty-2 (7.0.0.0b2) https://launchpad.net/cinder/liberty/liberty-2 (8.0.0.0b2) https://launchpad.net/ceilometer/liberty/liberty-2 (5.0.0.0b2) https://launchpad.net/heat/liberty/liberty-2 (5.0.0.0b2) https://launchpad.net/trove/liberty/liberty-2 (4.0.0.0b2) https://launchpad.net/sahara/liberty/liberty-2 (3.0.0.0b2) https://launchpad.net/designate/liberty/liberty-2 (1.0.0.0b2) https://launchpad.net/manila/liberty/liberty-2 (1.0.0.0b2) https://launchpad.net/barbican/liberty/liberty-2 (1.0.0.0b2) https://launchpad.net/zaqar/liberty/liberty-2 (1.0.0.0b2) The next development milestone, liberty-3, is scheduled for September 3rd. It will coincide for those projects with the final feature freeze deadline. You can track the current achievements of the Liberty development cycle and some of the work in progress at: http://status.openstack.org/release/ Regards, -- Thierry Carrez (ttx)

1 0

[Security][LP# 1471161] Designate mDNS DoS through incorrect handling of large RecordSets
by Kiall Mac Innes 28 Jul '15

28 Jul '15

Launchpad Number: 1471161 CVE: TBA Date: July 28, 2015 Title: Designate mDNS DoS through incorrect handling of large RecordSets Reporter: Florian Weimer (Red Hat) Products: Designate Versions: 2015.1.0 through 1.0.0.0b1 Description: Florian Weimer from Red Hat reported a vulnerability in Designate. By creating a single RecordSet that exceeds the configured max allowed DNS packet size, an authenticated user may cause the Designate mDNS service to enter an infinite loop, triggering a DoS. Liberty (development branch) fix: https://review.openstack.org/206578 Kilo fix: https://review.openstack.org/206580 Notes: This fix will be included in a future 1.0.0.0b2 release. References: https://launchpad.net/bugs/1471161 -- Kiall Mac Innes, OpenStack Designate PTL

1 0

[OSSA 2015-013] Glance task flow may fail to delete image from backend
by Grant Murphy 28 Jul '15

28 Jul '15

===================================================================== OSSA-2015-013: Glance task flow may fail to delete image from backend ===================================================================== :Date: July 28, 2015 :CVE: CVE-2015-3289 Affects ~~~~~~~ - Glance: versions 2015.1.0 Description ~~~~~~~~~~~ Abhishek Kekane from NTT reported a vulnerability in Glance. By creating numerous images using the import task flow API and deleting them, an authenticated attacker may accumulate untracked image data in the backend resulting in potential resource exhaustion and denial of service. All glance setups are affected. Patches ~~~~~~~ - https://review.openstack.org/#/c/181816/ (Kilo) - https://review.openstack.org/#/c/181345/ (Liberty) Credits ~~~~~~~ - Abhishek Kekane from NTT (CVE-2015-3289) References ~~~~~~~~~~ - https://launchpad.net/bugs/1454087 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3289 Notes ~~~~~ - This fix will be included in the future 2015.1.1 (kilo) release.

1 0