- OpenStack-announce - lists.openstack.org

[release][oslo] oslo.versionedobjects release 0.9.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are tickled pink to announce the release of: oslo.versionedobjects 0.9.0: Oslo Versioned Objects library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.versionedobjects With package available at: https://pypi.python.org/pypi/oslo.versionedobjects For more details, please see the git log history below and: http://launchpad.net/oslo.versionedobjects/+milestone/0.9.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.versionedobjects Changes in oslo.versionedobjects 0.8.0..0.9.0 --------------------------------------------- bbb52b5 Updated from global requirements 00c503e Allow calling obj_to_primitive() with version_manifest Diffstat (except docs and test files) ------------------------------------- oslo_versionedobjects/base.py | 6 ++++-- requirements.txt | 2 +- 3 files changed, 12 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 48050d2..28b8550 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ oslo.concurrency>=2.3.0 # Apache-2.0 -oslo.config>=2.1.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[OSSA 2015-016] Information leak via Swift tempurls (CVE-2015-5223)
by Tristan Cacqueray 27 Aug '15

27 Aug '15

================================================== OSSA-2015-016: Information leak via Swift tempurls ================================================== :Date: August 26, 2015 :CVE: CVE-2015-5223 Affects ~~~~~~~ - Swift: versions through 2.3.0 Description ~~~~~~~~~~~ Richard Hawkins from Rackspace and Swift core reviewers reported a vulnerability in Swift tempurls. When in possession of a tempurl key authorized for PUT, a malicious actor may retrieve other objects in the same Swift account (tenant). All Swift setups are affected. Patches ~~~~~~~ - https://review.openstack.org/217253 (Juno) - https://review.openstack.org/217254 (Kilo) - https://review.openstack.org/217255 (Kilo) - https://review.openstack.org/217259 (Liberty) - https://review.openstack.org/217260 (Liberty) Credits ~~~~~~~ - Richard Hawkins from Rackspace (CVE-2015-5223) - Swift core reviewers from OpenStack (CVE-2015-5223) References ~~~~~~~~~~ - https://launchpad.net/bugs/1453948 - https://launchpad.net/bugs/1449212 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5223 Notes ~~~~~ - This fix will be included in future 2014.2.4 (juno) and 2015.1.2 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][documentation] openstack-doc-tools release 0.30.1 (liberty)
by doug＠doughellmann.com 26 Aug '15

26 Aug '15

We are amped to announce the release of: openstack-doc-tools 0.30.1: Installed /mnt/repos/openstack-infra /release-tools/release-tag-openstack-doc-tools-nIf/openstack /openstack-doc-tools/.eggs/pbr-1.6.0-py2.7.egg [pbr] Generating ChangeLog Tools for OpenStack Documentation This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/openstack-doc-tools With package available at: https://pypi.python.org/pypi/openstack-doc-tools For more details, please see the git log history below and: http://launchpad.net/openstack-manuals/+milestone/0.30.1 Please report issues through launchpad: http://bugs.launchpad.net/openstack-manuals Changes in openstack-doc-tools 0.30.0..0.30.1 --------------------------------------------- bd539fc Fix Install Guide builds dba8e4a Fix mis-option identification for doc-tools-update-cli-reference 11e46da autohelp: add oslo.service to the list of extensions 5b21d5f [sitemap] transform README from Markdown to reStructuredText 8a2df7b [sitemap] resolve several ScrapyDeprecationWarning exceptions Diffstat (except docs and test files) ------------------------------------- RELEASE_NOTES.rst | 6 ++++++ autogenerate_config_docs/autohelp.py | 3 ++- bin/doc-tools-check-languages | 13 ++++++++++++ os_doc_tools/commands.py | 24 +++++++++++++--------- sitemap/README.md | 39 ------------------------------------ sitemap/README.rst | 36 +++++++++++++++++++++++++++++++++ sitemap/generator/settings.py | 4 ++-- sitemap/generator/spiders/sitemap.py | 4 ++-- 8 files changed, 76 insertions(+), 53 deletions(-)

1 0

[OSSA 2015-015] Nova instance migration process does not stop when instance is deleted (CVE-2015-3241)
by Tristan Cacqueray 25 Aug '15

25 Aug '15

===================================================================================== OSSA-2015-015: Nova instance migration process does not stop when instance is deleted ===================================================================================== :Date: August 25, 2015 :CVE: CVE-2015-3241 Affects ~~~~~~~ - Nova: versions through 2014.2.3 and 2015.1 versions through 2015.1.1 Description ~~~~~~~~~~~ George Shuklin from Webzilla LTD reported a vulnerability in Nova migration process. By resizing and deleting an instance repeatedly an authenticated user may overcome his quota and overload Nova computes node resulting in a denial of service attack. All Nova setups are affected. Patches ~~~~~~~ - https://review.openstack.org/208876 (Juno) - https://review.openstack.org/214528 (Juno) - https://review.openstack.org/213234 (Kilo) - https://review.openstack.org/209856 (Kilo) - https://review.openstack.org/194861 (Liberty) - https://review.openstack.org/192986 (Liberty) Credits ~~~~~~~ - George Shuklin from Webzilla LTD (CVE-2015-3241) References ~~~~~~~~~~ - https://launchpad.net/bugs/1387543 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3241 Notes ~~~~~ - This fix requires oslo.concurrency >= 1.8.2 for Kilo and >= 2.3.0 for Liberty. Juno fix embeds a patched version of oslo.concurrency. - This fix will be included in future 2014.2.4 (juno) and 2015.1.2 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][wsme] wsme release 0.8.0 (liberty)
by doug＠doughellmann.com 25 Aug '15

25 Aug '15

We are amped to announce the release of: wsme 0.8.0: Simplify the writing of REST APIs, and extend them with additional protocols. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/stackforge/wsme With package available at: https://pypi.python.org/pypi/WSME For more details, please see the git log history below and: https://launchpad.net/wsme/+bugs/+milestone/0.8.0 Please report issues through launchpad: https://bugs.launchpad.net/wsme/+bugs Changes in WSME 0.7.0..0.8.0 ---------------------------- 1dc4421 Return 400, if the query string is not a dict 078cd72 rest: return 415 when content-type is invalid 03f0c0b json: raise ValueError invalid list or dict 2cb266e Fixes exception path with the datatype is a Object 1fef3f2 Update README formatting for release tools e6d471b Set up dependencies for cross-tests 6461c1b Complex types should check unexpected attributes Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + README.rst | 7 ++- tox-tmpl.ini | 6 +- tox.ini | 2 + wsme/exc.py | 28 ++++++++++ wsme/rest/args.py | 7 ++- wsme/rest/json.py | 62 +++++++++++++++------ wsme/root.py | 6 +- 10 files changed, 215 insertions(+), 27 deletions(-)

1 0

[release][oslo] pbr release 1.6.0 (liberty)
by davanum＠gmail.com 25 Aug '15

25 Aug '15

We are pumped to announce the release of: pbr 1.6.0: Python Build Reasonableness This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack-dev/pbr With package available at: https://pypi.python.org/pypi/pbr For more details, please see the git log history below and: http://launchpad.net/pbr/+milestone/1.6.0 Please report issues through launchpad: http://bugs.launchpad.net/pbr Changes in pbr 1.5.0..1.6.0 --------------------------- 1e05037 Strip comments in requirements files c3fc63c Fix retrieval of commit data and most recent tag. 8263806 Expose a 'rpm_version' extra command Diffstat (except docs and test files) ------------------------------------- pbr/git.py | 20 ++++++++++---------- pbr/hooks/commands.py | 1 + pbr/packaging.py | 23 ++++++++++++++++++++++- 5 files changed, 62 insertions(+), 14 deletions(-)

1 0

[release][oslo] oslo.versionedobjects release 0.8.0 (liberty)
by davanum＠gmail.com 25 Aug '15

25 Aug '15

We are pumped to announce the release of: oslo.versionedobjects 0.8.0: Oslo Versioned Objects library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.versionedobjects With package available at: https://pypi.python.org/pypi/oslo.versionedobjects For more details, please see the git log history below and: http://launchpad.net/oslo.versionedobjects/+milestone/0.8.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.versionedobjects Changes in oslo.versionedobjects 0.7.0..0.8.0 --------------------------------------------- 19d21f6 Switch back to iso format on the wire 576dead Save and re-raise exception e73c93c Check for obj_relationships in List objects f145204 Updated from global requirements cb898f3 Make compat of object lists use manifest function 59f69b4 Add tests for subobject backporting by manifest 2bb2ddd Make ObjectListBase a collections.Sequence 5f87da9 Switch from deprecated timeutils.isotime 3573e03 Make direct call to object's obj_from_primitive 26f6a55 Add usage information 251493a Imported Translations from Transifex db095dd Updated from global requirements 79e0cb8 Add validation on target_version arg when calling obj_to_primitive b38c8dd Support using the version manifest for obj_make_compatible() 9a4c006 Implement multi-version object backport method 2e083bc Add a new VersionPredicate type of field ae04523 Add obj_tree_get_versions() utility method Diffstat (except docs and test files) ------------------------------------- .../LC_MESSAGES/oslo.versionedobjects-log-error.po | 4 +- .../en_GB/LC_MESSAGES/oslo.versionedobjects.po | 8 +- .../LC_MESSAGES/oslo.versionedobjects-log-error.po | 4 +- .../locale/oslo.versionedobjects.pot | 29 +- oslo_versionedobjects/_utils.py | 12 + oslo_versionedobjects/base.py | 323 +++++++++++----- oslo_versionedobjects/exception.py | 8 + oslo_versionedobjects/fields.py | 27 +- requirements.txt | 6 +- test-requirements.txt | 2 +- 13 files changed, 896 insertions(+), 149 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index df0e376..48050d2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ oslo.concurrency>=2.3.0 # Apache-2.0 -oslo.config>=1.11.0 # Apache-2.0 +oslo.config>=2.1.0 # Apache-2.0 @@ -11 +11 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=1.9.0 # Apache-2.0 +oslo.utils>=2.0.0 # Apache-2.0 @@ -13 +13 @@ iso8601>=0.1.9 -oslo.log>=1.6.0 # Apache-2.0 +oslo.log>=1.8.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4c2d38a..c6077e9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ hacking<0.11,>=0.10.0 -oslotest>=1.9.0 # Apache-2.0 +oslotest>=1.10.0 # Apache-2.0

1 0

[release][oslo] oslo.utils release 2.4.0 (liberty)
by davanum＠gmail.com 25 Aug '15

25 Aug '15

We are tickled pink to announce the release of: oslo.utils 2.4.0: Oslo Utility library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.utils With package available at: https://pypi.python.org/pypi/oslo.utils For more details, please see the git log history below and: http://launchpad.net/oslo.utils/+milestone/2.4.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.utils Changes in oslo.utils 2.3.0..2.4.0 ---------------------------------- eba46f3 Provide a common exception caused by base class Diffstat (except docs and test files) ------------------------------------- oslo_utils/excutils.py | 78 ++++++++++++++++++++++++++++++++++++++- 2 files changed, 112 insertions(+), 1 deletion(-)

1 0

[release][oslo] oslo.service release 0.8.0 (liberty)
by davanum＠gmail.com 25 Aug '15

25 Aug '15

We are tickled pink to announce the release of: oslo.service 0.8.0: oslo.service library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.service With package available at: https://pypi.python.org/pypi/oslo.service For more details, please see the git log history below and: http://launchpad.net/oslo.service/+milestone/0.8.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.service Changes in oslo.service 0.7.0..0.8.0 ------------------------------------ 6dd3ad5 Added wsgi functionality Diffstat (except docs and test files) ------------------------------------- oslo_service/_options.py | 36 +++ oslo_service/wsgi.py | 318 ++++++++++++++++++++++++ requirements.txt | 6 + setup.cfg | 1 + tox.ini | 10 + 11 files changed, 926 insertions(+) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b8699df..6206e8e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ Babel>=1.3 +WebOb>=1.2.3 @@ -11,0 +13 @@ oslo.config>=2.1.0 # Apache-2.0 +oslo.log>=1.8.0 # Apache-2.0 @@ -13,0 +16,4 @@ oslo.i18n>=1.5.0 # Apache-2.0 +PasteDeploy>=1.5.0 +Routes!=2.0,!=2.1,>=1.12.3;python_version=='2.7' +Routes!=2.0,>=1.12.3;python_version!='2.7' +Paste

1 0

[release][oslo] oslo.rootwrap release 2.3.0 (liberty)
by davanum＠gmail.com 25 Aug '15

25 Aug '15

We are gleeful to announce the release of: oslo.rootwrap 2.3.0: Oslo Rootwrap This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.rootwrap With package available at: https://pypi.python.org/pypi/oslo.rootwrap For more details, please see the git log history below and: http://launchpad.net/oslo.rootwrap/+milestone/2.3.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.rootwrap Changes in oslo.rootwrap 2.2.0..2.3.0 ------------------------------------- e5f9a39 Handle renamed executables with KillFilter 6775cdf Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_rootwrap/filters.py | 65 ++++++++++++++++++++++++++++-------- test-requirements.txt | 2 +- 3 files changed, 82 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0fe029e..e615d7d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17 +17 @@ oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.9.0 # Apache-2.0 +oslotest>=1.10.0 # Apache-2.0

1 0