- OpenStack-announce - lists.openstack.org

[OSSA 2016-003] Heat denial of service through template-validate (CVE-2015-5295)
by Tristan Cacqueray 20 Jan '16

20 Jan '16

=============================================================== OSSA-2016-003: Heat denial of service through template-validate =============================================================== :Date: January 19, 2016 :CVE: CVE-2015-5295 Affects ~~~~~~~ - Heat: <=2015.1.2, ==5.0.0 Description ~~~~~~~~~~~ Steven Hardy from Red Hat reported a vulnerability in Heat template validation. By referencing a local file like /dev/zero, an authenticated user may trick the heat engine service to load arbitrary local file content resulting in a Denial of Service attack through memory exhaustion. Note that the file content is not written back to the user, though the user can determine if a file exists and if it is readable by heat-engine. All Heat setups are affected. Patches ~~~~~~~ - https://review.openstack.org/269692 (Kilo) - https://review.openstack.org/269691 (Liberty) - https://review.openstack.org/269689 (Mitaka) Credits ~~~~~~~ - Steven Hardy from Red Hat (CVE-2015-5295) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1496277 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5295 Notes ~~~~~ - This fix will be included in future 2015.1.3 (kilo) and 5.0.1 (liberty) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][stable][neutron] python-neutronclient release 3.1.1 (liberty)
by doug＠doughellmann.com 20 Jan '16

20 Jan '16

We are pumped to announce the release of: python-neutronclient 3.1.1: CLI and Client Library for OpenStack Networking This release is part of the liberty stable release series. With source available at: http://git.openstack.org/cgit/openstack/python-neutronclient With package available at: https://pypi.python.org/pypi/python-neutronclient Please report issues through launchpad: http://bugs.launchpad.net/python-neutronclient For more details, please see below. Changes in python-neutronclient 3.1.0..3.1.1 -------------------------------------------- c5e1d2b Ensure to decode bytes or fail 67d1b49 Do not allow name lookups on RBAC policies c816799 Updated from global requirements ac031aa Updated from global requirements 0590835 Revert parent_id and obj_id parameter order eb97444 Updated from global requirements c5d04c9 Let devstack-gate handle the gate hook timeout db7eb55 Py3k compliance: check for bytes when making a string ef326ae Update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutronclient/neutron/v2_0/rbac.py | 4 ++++ neutronclient/v2_0/client.py | 6 +++--- requirements.txt | 6 +++--- 6 files changed, 13 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6a677ab..279f605 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,3 +11,3 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 -requests>=2.5.2 -python-keystoneclient>=1.6.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 +requests!=2.8.0,>=2.5.2 +python-keystoneclient!=1.8.0,>=1.6.0

1 0

[release][stable][nova] nova release 12.0.1 (liberty)
by doug＠doughellmann.com 20 Jan '16

20 Jan '16

We are thrilled to announce the release of: nova 12.0.1: Cloud computing fabric controller This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/nova For more details, please see below. 12.0.1 ^^^^^^ The 12.0.1 release contains fixes for two security issues. Security Issues *************** * [OSSA 2016-001] Nova host data leak through snapshot (CVE-2015-7548) * Bug 1524274 (https://bugs.launchpad.net/nova/+bug/1524274) * Announcement [OSSA 2016-002] Xen connection password leak in logs via StorageError (CVE-2015-8749) * Bug 1516765 (https://bugs.launchpad.net/nova/+bug/1516765) * Announcement Bug Fixes ********* * Fixes a bug where Nova services won't recover after a temporary DB connection issue, when service group DB driver is used together with local conductor, as the driver only handles RPC timeout errors. For more info see https://bugs.launchpad.net/nova/+bug/1505471 * Fixes a bug where Nova services won't recover after a temporary DB / MQ connection issue, when service group DB driver is used together with remote conductor, as the driver only handles RPC timeout errors and does not account for other types of errors (e.g. wrapped DB errors on the remote conductor transported over RPC) For more info see https://bugs.launchpad.net/nova/+bug/1517926 Other Notes *********** * Start using reno to manage release notes. Changes in nova 12.0.0..12.0.1 ------------------------------ 0dac205 Treat sphinx warnings as errors when building release notes 9c3cce7 Fix warning in 12.0.1-cve-bugs-7b04b2e34a3e9a70.yaml release note c9c0b1b Fix backing file detection in libvirt live snapshot 9dbf601 Imported Translations from Zanata b2acc9f Add security fixes to the release notes for 12.0.1 a9c8dee Fix format conversion in libvirt snapshot cd4eeea Fix format detection in libvirt snapshot 51bfbbd VMware: specify chunk size when reading image data 1590e13 Imported Translations from Zanata cf75bf2 Revert "Fixes Python 3 str issue in ConfigDrive creation" 7c1f1af Don't load deleted instances b20f058 Imported Translations from Zanata 9d47930 Make scheduler_hints schema allow list of id 05e54eb Add -constraints sections for CI jobs 1a688e3 Remove the TestRemoteObject class 8005a1e Updated from global requirements b8c20a8 VMware: fix bug for config drive when inventory folder is used 94d6b69 Omnibus stable fix for upstream requirements breaks 288c87f Refresh stale volume BDMs in terminate_connection ff36a23 Fix metadata service security-groups when using Neutron 6ba4803 Add "vnc" option group for sample nova.conf file 29f70e7 Scheduler: honor the glance metadata for hypervisor details 821f644 reno: document fixes for service state reporting issues e0647dd servicegroup: stop zombie service due to exception 1f94018 Imported Translations from Zanata cf197ec xen: mask passwords in volume connection_data dict d0f4a37 Fix is_volume_backed_instance() for unset image_ref b04d0b1 Split up test_is_volume_backed_instance() into five functions 626139e Handle DB failures in servicegroup DB driver 0134d88 Fixes Python 3 str issue in ConfigDrive creation 0ff44c9 Fix Nova's indirection fixture override f04cf8c Updated from global requirements 70fbad4 Add first reno-based release note 999267c Add "unreleased" release notes page 5207013 Add reno for release notes management d3fe7e4 cells is a sad panda about scheduler hints aea8790 libvirt:on snapshot delete, use qemu-img to blockRebase if VM is stopped 474e7bb Fix attibute error when cloning raw images in Ceph cc19164 Exclude all BDM checks for cells 50db2a5 Image meta: treat legacy vmware adapter type values 9a1ff88 Switch to post-versioning e6d3b85 update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + devstack/tempest-dsvm-cells-rc | 6 +- nova/api/metadata/base.py | 6 +- .../openstack/compute/schemas/scheduler_hints.py | 13 +- nova/compute/api.py | 11 +- nova/compute/manager.py | 16 + nova/db/sqlalchemy/__init__.py | 23 -- nova/locale/cs/LC_MESSAGES/nova-log-critical.po | 10 +- nova/locale/cs/LC_MESSAGES/nova-log-error.po | 10 +- nova/locale/cs/LC_MESSAGES/nova-log-info.po | 14 +- nova/locale/cs/LC_MESSAGES/nova-log-warning.po | 10 +- nova/locale/cs/LC_MESSAGES/nova.po | 6 +- nova/locale/de/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/de/LC_MESSAGES/nova-log-info.po | 16 +- nova/locale/de/LC_MESSAGES/nova.po | 27 +- nova/locale/es/LC_MESSAGES/nova-log-critical.po | 13 +- nova/locale/es/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/es/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/es/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/es/LC_MESSAGES/nova.po | 28 +- nova/locale/es_MX/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/fr/LC_MESSAGES/nova-log-critical.po | 13 +- nova/locale/fr/LC_MESSAGES/nova-log-error.po | 18 +- nova/locale/fr/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/fr/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/fr/LC_MESSAGES/nova.po | 55 ++-- nova/locale/it/LC_MESSAGES/nova-log-error.po | 13 +- nova/locale/it/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/it/LC_MESSAGES/nova.po | 7 +- nova/locale/ja/LC_MESSAGES/nova.po | 83 ++++-- nova/locale/ko_KR/LC_MESSAGES/nova-log-critical.po | 19 ++ nova/locale/ko_KR/LC_MESSAGES/nova.po | 205 ++++++++++++- nova/locale/nova-log-error.pot | 138 ++++----- nova/locale/nova-log-info.pot | 323 +++++++++++---------- nova/locale/nova.pot | 215 +++++++------- nova/locale/pa_IN/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/pt_BR/LC_MESSAGES/nova-log-critical.po | 19 ++ nova/locale/pt_BR/LC_MESSAGES/nova.po | 30 +- nova/locale/ru/LC_MESSAGES/nova.po | 26 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova.po | 7 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-info.po | 14 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 7 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 7 +- nova/objects/image_meta.py | 3 +- nova/opts.py | 2 +- nova/scheduler/host_manager.py | 3 +- nova/servicegroup/drivers/db.py | 20 +- .../api/openstack/compute/test_scheduler_hints.py | 29 +- .../unit/servicegroup/test_db_servicegroup.py | 42 +++ nova/virt/block_device.py | 27 +- nova/virt/images.py | 34 ++- nova/virt/libvirt/driver.py | 105 +++++-- nova/virt/libvirt/imagebackend.py | 19 +- nova/virt/libvirt/storage/rbd_utils.py | 4 +- nova/virt/libvirt/utils.py | 35 ++- nova/virt/vmwareapi/io_util.py | 3 +- nova/virt/vmwareapi/vmops.py | 4 +- nova/virt/xenapi/volume_utils.py | 3 +- nova/virt/xenapi/volumeops.py | 6 +- releasenotes/notes/.placeholder | 0 .../notes/12.0.1-cve-bugs-7b04b2e34a3e9a70.yaml | 14 + .../notes/bug-1505471-28ef47bdc9487a31.yaml | 8 + .../notes/bug-1517926-ed0dda23ea525306.yaml | 10 + .../notes/start-using-reno-e4ea112d593415da.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 259 +++++++++++++++++ releasenotes/source/index.rst | 18 ++ releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 12 +- setup.cfg | 1 - test-requirements.txt | 5 +- tox.ini | 49 +++- 97 files changed, 1836 insertions(+), 905 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 62bdcf8..494b09d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ Jinja2>=2.6 # BSD License (3 clause) -keystonemiddleware>=2.0.0 +keystonemiddleware!=2.4.0,>=2.0.0 @@ -29 +29 @@ python-cinderclient>=1.3.1 -python-keystoneclient>=1.6.0 +python-keystoneclient!=1.8.0,>=1.6.0 @@ -32 +32 @@ python-glanceclient>=0.18.0 -requests>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -43 +43 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 @@ -46 +46 @@ oslo.rootwrap>=2.0.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,>=1.16.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 @@ -50 +50 @@ rfc3986>=0.2.0 # Apache-2.0 -oslo.middleware>=2.8.0 # Apache-2.0 +oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fd27b73..074337d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -Pillow>=2.4.0,<3.0.0 # MIT +Pillow<3.0.0,>=2.4.0 # MIT @@ -30,0 +31,3 @@ oslo.vmware>=1.16.0 # Apache-2.0 + +# releasenotes +reno>=0.1.1 # Apache2

1 0

[release][telemetry] python-ceilometerclient release 2.2.1 (mitaka)
by doug＠doughellmann.com 15 Jan '16

15 Jan '16

We are gleeful to announce the release of: python-ceilometerclient 2.2.1: OpenStack Telemetry API Client Library This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-ceilometerclient With package available at: https://pypi.python.org/pypi/python-ceilometerclient Please report issues through launchpad: https://bugs.launchpad.net/python-ceilometerclient For more details, please see below. Changes in python-ceilometerclient 2.2.0..2.2.1 ----------------------------------------------- f0124b7 Only token or creds are required. Diffstat (except docs and test files) ------------------------------------- ceilometerclient/client.py | 39 +++++++++++++++++++++++------- 2 files changed, 31 insertions(+), 10 deletions(-)

1 0

[release][keystone] python-keystoneclient release 2.1.1 (mitaka)
by davanum＠gmail.com 14 Jan '16

14 Jan '16

We are happy to announce the release of: python-keystoneclient 2.1.1: Client Library for OpenStack Identity This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-keystoneclient With package available at: https://pypi.python.org/pypi/python-keystoneclient Please report issues through launchpad: https://bugs.launchpad.net/python-keystoneclient For more details, please see below. Changes in python-keystoneclient 2.0.0..2.1.1 --------------------------------------------- d20b300 Revert "Support `truncated` flag returned by keystone" c28d408 Support `truncated` flag returned by keystone f8c47a1 Updated from global requirements b939dd9 Make tests run against original client and sessions 2dd67f8 Seperate Client base test class 59ee992 move hacking to tests folder 26bdb06 remove venv bits from tools 7ff3955 Add include_subtree to role_list_assignments call a3d4495 Updated from global requirements 7a4f019 remove the default arguments "{}" ff8f31d Updated from global requirements afb46ab remove oslo-incubator's memorycache 92fb876 WebOb not needed after auth_token removal 646350c Remove keystoneclient.middleware 7c1a67a Updated from global requirements dd5175e Updated from global requirements 46e449c Put py34 first in the env order of tox 7035376 Accept v2 params to v3 service create 7ca83ae Delete python bytecode before every test run Diffstat (except docs and test files) ------------------------------------- examples/pki/gen_pki.sh | 5 - examples/pki/run_all.sh | 1 - keystoneclient/hacking/__init__.py | 0 keystoneclient/hacking/checks.py | 37 - keystoneclient/middleware/__init__.py | 0 keystoneclient/middleware/auth_token.py | 1624 ---------------- keystoneclient/middleware/memcache_crypt.py | 209 --- keystoneclient/middleware/s3_token.py | 274 --- keystoneclient/openstack/common/memorycache.py | 103 -- keystoneclient/v3/role_assignments.py | 6 +- keystoneclient/v3/services.py | 20 +- openstack-common.conf | 2 - .../notes/remove-middleware-eef8c40117b465aa.yaml | 10 + requirements.txt | 7 +- test-requirements.txt | 11 +- tools/install_venv.py | 71 - tools/install_venv_common.py | 172 -- tools/with_venv.sh | 4 - tox.ini | 8 +- 61 files changed, 395 insertions(+), 5106 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 944e669..2b90f62 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,2 +11 @@ debtcollector>=0.3.0 # Apache-2.0 -keystoneauth1>=1.0.0 -netaddr!=0.7.16,>=0.7.12 +keystoneauth1>=2.1.0 @@ -16 +15 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=2.8.0 # Apache-2.0 +oslo.utils>=3.2.0 # Apache-2.0 @@ -18 +17 @@ PrettyTable<0.8,>=0.7 -requests>=2.8.1 +requests!=2.9.0,>=2.8.1 diff --git a/test-requirements.txt b/test-requirements.txt index 16d2078..9e73b39 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ fixtures>=1.3.1 -keyring!=3.3,>=2.1 +keyring>=5.5.1 @@ -16,3 +16,2 @@ oslotest>=1.10.0 # Apache-2.0 -pycrypto>=2.6 -reno>=0.1.1 # Apache2 -requests-mock>=0.6.0 # Apache-2.0 +reno>=0.1.1 # Apache2 +requests-mock>=0.7.0 # Apache-2.0 @@ -20 +19 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -tempest-lib>=0.10.0 +tempest-lib>=0.12.0 @@ -22,0 +22 @@ testresources>=0.2.4 +testscenarios>=0.4 @@ -24 +23,0 @@ testtools>=1.4.0 -WebOb>=1.2.3

1 0

[release][stable][designate] designate-dashboard release 1.0.1 (liberty)
by doug＠doughellmann.com 14 Jan '16

14 Jan '16

We are pumped to announce the release of: designate-dashboard 1.0.1: Designate Horizon UI bits This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/designate-dashboard For more details, please see below. Changes in designate-dashboard 1.0.0..1.0.1 ------------------------------------------- 67a1571 Empty hidden "Create Record" form fields 44fb830 Add defaultbranch=stable/liberty 2dd9dc8 Updated from global requirements 6b0947c Imported Translations from Zanata 1e2c1b7 Switch to post-versioning Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + designate-dashboard/locale/fr/LC_MESSAGES/designate-dashboard.po | 7 +++---- designate-dashboard/locale/ru/LC_MESSAGES/designate-dashboard.po | 7 +++---- .../locale/tr_TR/LC_MESSAGES/designate-dashboard.po | 7 +++---- .../dns_domains/templates/dns_domains/_create_record.html | 9 +++++++++ setup.cfg | 1 - test-requirements.txt | 2 +- 7 files changed, 20 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9b9c91e..787e4cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27 +27 @@ django-compressor>=1.4 -django-openstack-auth>=2.0.0 +django-openstack-auth!=2.1.0,>=2.0.0

1 0

[release][keystone] python-keystoneclient release 2.1.0 (mitaka)
by doug＠doughellmann.com 14 Jan '16

14 Jan '16

We are happy to announce the release of: python-keystoneclient 2.1.0: Client Library for OpenStack Identity This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-keystoneclient With package available at: https://pypi.python.org/pypi/python-keystoneclient Please report issues through launchpad: https://bugs.launchpad.net/python-keystoneclient For more details, please see below. 2.1.0 ^^^^^ keystoneclient.apiclient has been removed. keystoneclient.middleware has been removed. Critical Issues *************** * [bug 1526651 (https://bugs.launchpad.net/python- keystoneclient/+bug/1526651)] The *keystoneclient.apiclient* module has been removed in favor of *keystoneclient.exceptions*. The aforementioned module has been deprecated since keystoneclient v0.7.1 which was inclued in the Juno release of OpenStack. * [bug 1449066 (https://bugs.launchpad.net/python- keystoneclient/+bug/1449066)] The *keystoneclient.middleware* module has been removed in favor of the keystonemiddleware library. The aforementioned module has been deprecated since keystoneclient v0.10.0 which was included in the Juno release of OpenStack. Bug Fixes ********* * [bug 1462694 (https://bugs.launchpad.net/python- keystoneclient/+bug/1462694)] Add support for *include_subtree* in list_role_assignments. * [bug 1526686 (https://bugs.launchpad.net/python- keystoneclient/+bug/1526686)] Replace textwrap with faster code in cms functions. * [bug 1457702 (https://bugs.launchpad.net/python- keystoneclient/+bug/1457702)] Change default endpoint to public for keystone v3. * [bug 1520244 (https://bugs.launchpad.net/python- keystoneclient/+bug/1520244)] Support *truncated* flag returned from server. Other Notes *********** * Support v2 parameters for the v3 service create method. Changes in python-keystoneclient 2.0.0..2.1.0 --------------------------------------------- 7327067 add release notes for ksc 2.1.0 9774ad3 Updated from global requirements c353a06 Updated from global requirements 13ade58 Fix for the deprecated library function f5bcd87 Implements base classes for functional tests bc85765 Wrong usage of "a/an" 1aaebf0 Remove "deprecated" internal method 903ecfd Cleanup release note 689e7d0 remove keystoneclient.apiclient.exceptions c28d408 Support `truncated` flag returned by keystone d3b11d6 Change default endpoint for Keystone v3 to public f8c47a1 Updated from global requirements b939dd9 Make tests run against original client and sessions 2dd67f8 Seperate Client base test class e20277a Removes MANIFEST.in as it is not needed explicitely by PBR fde0bf7 Replace textwrap with fast standard code 9822135 Docstring: Mark optional parameter as optional. fcbb2d7 Fix Resource.__eq__ mismatch semantics of object equal 59ee992 move hacking to tests folder 26bdb06 remove venv bits from tools 7ff3955 Add include_subtree to role_list_assignments call a3d4495 Updated from global requirements 7a4f019 remove the default arguments "{}" ff8f31d Updated from global requirements afb46ab remove oslo-incubator's memorycache 92fb876 WebOb not needed after auth_token removal e340caf Deprecated tox -downloadcache option removed 646350c Remove keystoneclient.middleware 7c1a67a Updated from global requirements dd5175e Updated from global requirements 46e449c Put py34 first in the env order of tox 7035376 Accept v2 params to v3 service create 7ca83ae Delete python bytecode before every test run Diffstat (except docs and test files) ------------------------------------- MANIFEST.in | 7 - examples/pki/gen_pki.sh | 5 - examples/pki/run_all.sh | 1 - keystoneclient/apiclient/__init__.py | 41 - keystoneclient/apiclient/exceptions.py | 34 - keystoneclient/base.py | 31 +- keystoneclient/client.py | 2 +- keystoneclient/common/cms.py | 3 +- keystoneclient/contrib/auth/v3/saml2.py | 2 +- keystoneclient/hacking/__init__.py | 0 keystoneclient/hacking/checks.py | 37 - keystoneclient/middleware/__init__.py | 0 keystoneclient/middleware/auth_token.py | 1624 ---------------- keystoneclient/middleware/memcache_crypt.py | 209 --- keystoneclient/middleware/s3_token.py | 274 --- keystoneclient/openstack/common/memorycache.py | 103 -- keystoneclient/v2_0/ec2.py | 4 +- keystoneclient/v2_0/endpoints.py | 2 +- keystoneclient/v2_0/roles.py | 2 +- keystoneclient/v2_0/services.py | 2 +- keystoneclient/v2_0/tenants.py | 4 +- keystoneclient/v2_0/tokens.py | 4 +- keystoneclient/v2_0/users.py | 2 +- keystoneclient/v3/client.py | 5 + keystoneclient/v3/ec2.py | 6 +- keystoneclient/v3/regions.py | 2 +- keystoneclient/v3/role_assignments.py | 6 +- keystoneclient/v3/services.py | 20 +- keystoneclient/v3/users.py | 4 +- openstack-common.conf | 2 - releasenotes/notes/ksc_2.1.0-739ded9c4c3f8aaa.yaml | 17 + .../notes/remove-middleware-eef8c40117b465aa.yaml | 10 + ...move_apiclient_exceptions-6580003a885db286.yaml | 10 + requirements.txt | 9 +- test-requirements.txt | 11 +- tools/install_venv.py | 71 - tools/install_venv_common.py | 172 -- tools/with_venv.sh | 4 - tox.ini | 11 +- 89 files changed, 615 insertions(+), 5234 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 944e669..29cae05 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,3 +11,2 @@ debtcollector>=0.3.0 # Apache-2.0 -keystoneauth1>=1.0.0 -netaddr!=0.7.16,>=0.7.12 -oslo.config>=2.7.0 # Apache-2.0 +keystoneauth1>=2.1.0 +oslo.config>=3.2.0 # Apache-2.0 @@ -16 +15 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=2.8.0 # Apache-2.0 +oslo.utils>=3.2.0 # Apache-2.0 @@ -18 +17 @@ PrettyTable<0.8,>=0.7 -requests>=2.8.1 +requests!=2.9.0,>=2.8.1 diff --git a/test-requirements.txt b/test-requirements.txt index 16d2078..4b7a533 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ fixtures>=1.3.1 -keyring!=3.3,>=2.1 +keyring>=5.5.1 @@ -16,3 +16,2 @@ oslotest>=1.10.0 # Apache-2.0 -pycrypto>=2.6 -reno>=0.1.1 # Apache2 -requests-mock>=0.6.0 # Apache-2.0 +reno>=0.1.1 # Apache2 +requests-mock>=0.7.0 # Apache-2.0 @@ -20 +19 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -tempest-lib>=0.10.0 +tempest-lib>=0.13.0 @@ -22,0 +22 @@ testresources>=0.2.4 +testscenarios>=0.4 @@ -24 +23,0 @@ testtools>=1.4.0 -WebOb>=1.2.3

1 0

[release][manila] python-manilaclient release 1.6.0 (mitaka)
by doug＠doughellmann.com 13 Jan '16

13 Jan '16

We are glad to announce the release of: python-manilaclient 1.6.0: Client library for OpenStack Manila API. This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-manilaclient With package available at: https://pypi.python.org/pypi/python-manilaclient Please report issues through launchpad: https://bugs.launchpad.net/python-manilaclient For more details, please see below. Changes in python-manilaclient 1.5.0..1.6.0 ------------------------------------------- f840c6f Client fix for api_version in positional and kwarg 31c0ddb Updated from global requirements bdf2045 Fix microversion comparison approach in functional tests 10eaad7 Drop py33 support 4bbe059 Deprecated tox -downloadcache option removed 9868257 Fix share size units to match the API 5f8ac35 API 'manage' can set share attr 'is_public' a313b70 Updated from global requirements 1168c0f Add python classifiers to setup.cfg 5b315ec Allows type-create to return dict instead of list 72e6d03 Updated from global requirements 2211b48 Remove py26 from tox config 4cad48c Delete python bytecode before every test run 40c3f1a Updated from global requirements d4ff416 Fix client backwards compatibility f2ebf21 Updated from global requirements 28263b9 Add support of new API URLs after port of extensions to core API c34e3b7 Nova Style API Version Support for Client 47b5191 Manila list shows one export location not multiple 84d4d57 Wrong help for 'manila cg-snapshot-create' command 7962533 Fix usage of setUpClass method in functional tests 9e86e90 Updated from global requirements a7af984 Add useful links to project README.rst 74a0401 Add support for enable/disable service API Diffstat (except docs and test files) ------------------------------------- .testr.conf | 1 + README.rst | 26 +- manilaclient/__init__.py | 12 +- manilaclient/api_versions.py | 363 ++- manilaclient/base.py | 4 + manilaclient/client.py | 30 +- manilaclient/common/constants.py | 4 +- manilaclient/common/httpclient.py | 202 ++ manilaclient/config.py | 13 + manilaclient/exceptions.py | 11 + manilaclient/httpclient.py | 185 -- manilaclient/shell.py | 217 +- .../unit/v1/test_consistency_group_snapshots.py | 174 -- .../unit/v2/test_consistency_group_snapshots.py | 186 ++ manilaclient/utils.py | 12 + manilaclient/v1/__init__.py | 15 +- manilaclient/v1/client.py | 40 +- manilaclient/v1/consistency_group_snapshots.py | 171 -- manilaclient/v1/consistency_groups.py | 167 -- manilaclient/v1/contrib/list_extensions.py | 40 +- manilaclient/v1/limits.py | 103 +- manilaclient/v1/quota_classes.py | 54 +- manilaclient/v1/quotas.py | 71 +- manilaclient/v1/scheduler_stats.py | 59 +- manilaclient/v1/security_services.py | 164 +- manilaclient/v1/services.py | 51 +- manilaclient/v1/share_instances.py | 77 - manilaclient/v1/share_networks.py | 174 +- manilaclient/v1/share_servers.py | 85 +- manilaclient/v1/share_snapshots.py | 149 +- manilaclient/v1/share_type_access.py | 50 +- manilaclient/v1/share_types.py | 166 +- manilaclient/v1/shares.py | 461 +--- manilaclient/v1/shell.py | 2666 ------------------- manilaclient/v2/__init__.py | 17 + manilaclient/v2/client.py | 297 +++ manilaclient/v2/consistency_group_snapshots.py | 193 ++ manilaclient/v2/consistency_groups.py | 191 ++ manilaclient/v2/contrib/__init__.py | 0 manilaclient/v2/contrib/list_extensions.py | 46 + manilaclient/v2/limits.py | 93 + manilaclient/v2/quota_classes.py | 89 + manilaclient/v2/quotas.py | 143 ++ manilaclient/v2/scheduler_stats.py | 62 + manilaclient/v2/security_services.py | 170 ++ manilaclient/v2/services.py | 104 + manilaclient/v2/share_instances.py | 96 + manilaclient/v2/share_networks.py | 181 ++ manilaclient/v2/share_servers.py | 92 + manilaclient/v2/share_snapshots.py | 174 ++ manilaclient/v2/share_type_access.py | 65 + manilaclient/v2/share_types.py | 177 ++ manilaclient/v2/shares.py | 575 +++++ manilaclient/v2/shell.py | 2709 ++++++++++++++++++++ requirements.txt | 12 +- setup.cfg | 4 + test-requirements.txt | 8 +- tox.ini | 10 +- 109 files changed, 12576 insertions(+), 9666 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fd1f6d6..82bcff5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,4 +10,4 @@ iso8601>=0.1.9 -oslo.config>=2.3.0 # Apache-2.0 -oslo.log>=1.8.0 # Apache-2.0 -oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 +oslo.config>=2.7.0 # Apache-2.0 +oslo.log>=1.12.0 # Apache-2.0 +oslo.serialization>=1.10.0 # Apache-2.0 +oslo.utils>=3.2.0 # Apache-2.0 @@ -16 +16 @@ pycrypto>=2.6 -requests>=2.5.2 +requests!=2.9.0,>=2.8.1 @@ -20 +20 @@ six>=1.9.0 -python-keystoneclient>=1.6.0 +python-keystoneclient!=1.8.0,>=1.6.0 diff --git a/test-requirements.txt b/test-requirements.txt index 53931bd..d0a014f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ coverage>=3.6 -ddt>=0.7.0 +ddt>=1.0.1 @@ -14 +14 @@ ordereddict -oslosphinx>=2.5.0 # Apache-2.0 +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 @@ -16 +16 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -tempest-lib>=0.9.0 +tempest-lib>=0.11.0 @@ -19 +19 @@ testtools>=1.4.0 -python-openstackclient>=1.5.0 +python-openstackclient>=2.0.0

1 0

[release][telemetry] python-ceilometerclient release 2.2.0 (mitaka)
by doug＠doughellmann.com 13 Jan '16

13 Jan '16

We are jazzed to announce the release of: python-ceilometerclient 2.2.0: OpenStack Telemetry API Client Library This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-ceilometerclient With package available at: https://pypi.python.org/pypi/python-ceilometerclient Please report issues through launchpad: https://bugs.launchpad.net/python-ceilometerclient For more details, please see below. Changes in python-ceilometerclient 2.1.0..2.2.0 ----------------------------------------------- d2feb88 remove py24 compatible code 71cb6b3 Don't copy the auth_plugin for aodh 3abe9d7 Remove openstack-common.conf c4abadf Use assertTrue/False instead of assertEqual(T/F) 7992c24 Improve ceilometer alarm enabled input parameter validation 6097b0c Updated from global requirements a63f152 Replace assertEqual(None, *) with assertIsNone in tests 17efb7a remove MANIFEST.in f554efd Updated from global requirements 2af2292 Restructuring a comment in Python-Ceilometerclient 66ff96f Deprecated tox -downloadcache option removed bac85a8 Revert "Delete python bytecode before every test run" c6cb6b1 Remove duplicated assert ce8957f Delete python bytecode before every test run 3fac5df Fix Python 3 version announced in metadata 401c0f3 Remove py26 support 7c67395 Fix the parameter order of assertEqual in ceilometerclient 7c18662 Fix Resource.__eq__ mismatch semantics of object equal Diffstat (except docs and test files) ------------------------------------- MANIFEST.in | 8 -- ceilometerclient/client.py | 76 +---------- ceilometerclient/common/base.py | 7 - .../openstack/common/apiclient/base.py | 2 - ceilometerclient/v2/alarms.py | 9 +- ceilometerclient/v2/client.py | 78 +++++------ ceilometerclient/v2/shell.py | 3 +- openstack-common.conf | 9 -- requirements.txt | 6 +- setup.cfg | 3 +- test-requirements.txt | 2 +- tox.ini | 5 +- 18 files changed, 211 insertions(+), 297 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index dc207b3..66bee05 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ iso8601>=0.1.9 -keystoneauth1>=1.0.0 +keystoneauth1>=2.1.0 @@ -10 +10 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=2.8.0 # Apache-2.0 +oslo.utils>=3.2.0 # Apache-2.0 @@ -13 +13 @@ python-keystoneclient!=1.8.0,>=1.6.0 -requests>=2.8.1 +requests!=2.9.0,>=2.8.1 diff --git a/test-requirements.txt b/test-requirements.txt index 143d04f..02b9483 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -tempest-lib>=0.10.0 +tempest-lib>=0.12.0

1 0

[OSSA 2016-002] Xen connection password leak in logs via StorageError (CVE-2015-8749)
by Grant Murphy 13 Jan '16

13 Jan '16

==================================================================== OSSA-2016-002: Xen connection password leak in logs via StorageError ==================================================================== :Date: January 11, 2016 :CVE: CVE-2015-8749 Affects ~~~~~~~ - Nova: >=2014.2 <= 2015.1.2, == 12.0.0 Description ~~~~~~~~~~~ Matt Riedemann from IBM reported an information disclosure vulnerability in Nova. If a StorageError occurs when attempting to connect a volume using the Xen API, the connection parameters will be logged. These parameters may include credentials that are not masked. An attacker with read access to Nova logs could use these credentials with the Xen API directly. Only Nova deployments using the Xen backend are affected by this flaw. Patches ~~~~~~~ - https://review.openstack.org/249239 (Kilo) - https://review.openstack.org/247825 (Liberty) - https://review.openstack.org/245987 (Mitaka) Credits ~~~~~~~ - Matt Riedemann from IBM (CVE-2015-8749) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1516765 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8749 Notes ~~~~~ - This fix will be included in future 2015.1.3 (kilo) and 12.0.1 (liberty) releases.

1 0