- OpenStack-announce - lists.openstack.org

[new][openstackansible] openstack-ansible 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are gleeful to announce the release of: openstack-ansible 13.1.2: Ansible playbooks for deploying OpenStack With source available at: http://git.openstack.org/cgit/openstack/openstack-ansible For more details, please see below. 13.1.2 ^^^^^^ New Features ************ * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True The tasks in the os_horizon role will determine which LBaaS version is in use (via "neutron_plugin_base") and activate the correct panel for LBaaS v1 or v2. * Horizon's IPv6 support is now configurable with Ansible variables. Deployers can enable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: True Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * The openstack-ansible-memcached_server role includes a new override,`memcached_connections` which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * Allow the fallocate_reserve option to be set (in bytes) for Swift, to help prevent disks from filling up and prevent a situation where Swift is unable to remove objects due to a lack of disk space. The fallocate_reserve value to is set to a default of 10GB. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. Upgrade Notes ************* * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * A new nova admin endpoint will be registered with the suffix "/v2.1/%(tenant_id)s". The nova admin endpoint with the suffix "/v2/%(tenant_id)s" may be manually removed. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. Bug Fixes ********* * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * The nova admin endpoint is now correctly registered as "/v2.1/%(tenant_id)s" instead of "/v2/%(tenant_id)s". * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. Changes in openstack-ansible 13.1.1..13.1.2 ------------------------------------------- ad610f5 DOCS: Clarify guidance for deploy hosts b365fb6 Correct nova admin endpoint version 0811490 [DOCS] Adding missing kernel modules for VPNaaS 02e95f2 DOCS: Configuration section - cleanup 7d4304c DOCS: Configuration section - cleanup 21cfc94 DOCS: Configuration section - cleanup 1f448f1 Docs: Ops section - cleanup 654adf6 Add Ceilometer instructions to new compute node instructions 2cc1f7d Docs: Overview section - cleanup 2b4ec3f Docs: Target hosts section - cleanup 855ce1a Docs: Installation section - cleanup ed4a4cf Docs: Appendix section - cleanup b65fb14 DOCS: Deployment host section - cleanup 9786c96 Add upgrade guide to documentation index b154dc2 Updates all SHAs for 13.1.2 a186757 Ensure all role dependencies are consistently specified 29ec1ba DOCS: Clean up of the Mitaka upgrade guide Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 22 +- .../install-guide/configure-cinder-backup.rst | 79 ------- .../install-guide/configure-cinder-horizon.rst | 26 --- .../configure-configurationintegrity.rst | 19 +- .../configure-federation-idp-adfs.rst | 24 +- .../install-guide/configure-federation-idp.rst | 48 ++-- .../install-guide/configure-federation-mapping.rst | 64 +++--- .../configure-federation-sp-overview.rst | 63 ++--- .../install-guide/configure-federation-sp.rst | 76 +++---- .../configure-federation-use-case.rst | 162 +++++++------ .../install-guide/configure-federation-wrapper.rst | 95 ++++---- .../configure-ironic-baremetal-node.rst | 21 -- .../install-guide/configure-ironic-deployment.rst | 12 - .../install-guide/configure-ironic-flavor.rst | 30 --- .../install-guide/configure-ironic-images.rst | 66 ------ .../install-guide/configure-ironic-neutron.rst | 22 -- .../install-guide/configure-ironic-nodes.rst | 52 ----- .../configure-network-services-fwaas.rst | 53 ----- .../configure-network-services-lbaas.rst | 94 -------- .../configure-network-services-vpnaas.rst | 50 ---- .../install-guide/configure-network-services.rst | 220 +++++++++++++++++- .../install-guide/configure-sslcertificates.rst | 99 ++++---- .../install-guide/configure-swift-config.rst | 95 ++++---- .../install-guide/configure-swift-devices.rst | 26 +-- .../install-guide/configure-swift-glance.rst | 27 ++- .../install-guide/configure-swift-overview.rst | 23 -- .../install-guide/configure-swift-policies.rst | 20 +- .../install-guide/install-infrastructure.rst | 12 +- .../install-guide/targethosts-networkexample.rst | 3 +- .../install-guide/targethosts-networkrefarch.rst | 3 +- .../defaults/repo_packages/openstack_other.yml | 6 +- .../defaults/repo_packages/openstack_services.yml | 32 +-- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 6 +- ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 +- ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 13 ++ .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 ++ ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../notes/neutron-fwaas-5c7c6508f2cc05c3.yaml | 2 +- .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + .../nova-admin-endpoint-fix-d52cc00caa5ab5dd.yaml | 6 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 8 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + requirements.txt | 4 +- scripts/run-tempest.sh | 2 +- scripts/scripts-library.sh | 2 +- scripts/sources-branch-updater.sh | 10 +- 106 files changed, 2219 insertions(+), 2007 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3b50b96..1bfe1c0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,2 +11,2 @@ PyYAML>=3.1.0 # ansible -pip==8.1.1 -setuptools==21.0.0 +pip==8.1.2 +setuptools==21.1.0

1 0

[new][openstackansible] openstack-ansible-security 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are jazzed to announce the release of: openstack-ansible-security 13.1.2: Security hardening role for openstack-ansible For more details, please see below. 13.1.2 ^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. Changes in openstack-ansible-security 13.1.1..13.1.2 ---------------------------------------------------- b1db632 Handle Match properly in sshd_config df31e9a Removing equal signs in docs e2b3990 Switch from dict to individual variables f0f5367 Doc updates Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 103 ++++++++++----------- ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 ++ ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 2 +- ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 ++ tasks/auth.yml | 4 +- tasks/kernel.yml | 14 +-- tasks/services.yml | 26 +++--- tasks/sshd.yml | 74 ++++++++++++++- templates/osas-auditd.j2 | 50 +++++----- 42 files changed, 271 insertions(+), 163 deletions(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are delighted to announce the release of: openstack-ansible-memcached_server 13.1.2: memcached_server for OpenStack Ansible For more details, please see below. 13.1.2 ^^^^^^ New Features * The openstack-ansible-memcached_server role includes a new override,`memcached_connections` which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. Changes in openstack-ansible-memcached_server 13.1.1..13.1.2 ------------------------------------------------------------ 045b2d8 Configure nofile OS limit for memcached server role Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 1 + ...ached_server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 +++++++++ tasks/memcached_config.yml | 16 ++++++++++++++++ 3 files changed, 26 insertions(+)

1 0

[new][openstackansible] openstack-ansible-galera_server 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are glad to announce the release of: openstack-ansible-galera_server 13.1.2: Galera Server role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-galera_server 13.1.0..13.1.2 --------------------------------------------------------- 26ec8e8 Role tests should test against the same branch 290e729 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 11 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index da55ba7..3307388 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -17,0 +18,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][horizon] horizon 9.0.1 release (mitaka)
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are pumped to announce the release of: horizon 9.0.1: OpenStack Dashboard This release is part of the mitaka stable release series. For more details, please see below. Changes in horizon 9.0.0..9.0.1 ------------------------------- 99dc305 Imported Translations from Zanata 838b824 UX: Misaligned OpenStack Logo 3c8c403 Django compressor cannot find custom theme templates 3639d3b Imported Translations from Zanata 52c0894 Fix untranslated strings in ng-instance 7896a2a Add scrolling to the projector selector 0ea1326 Imported Translations from Zanata cdde60c Change Metadata Display widget to case insensitive a597414 Fix workflow bug in "Create Network" dialog dfeacc2 Fix babel msgids to include tag attributes and entities c5779c7 "Clear Selection" is unlocalzed b398571 Fix existing metadata display in metadata widget 31b9439 Image create "Copy Data" checkbox wrong label 26e359b Imported Translations from Zanata f812b3c Updated from global requirements c570ee9 Fix key import in angular Launch Instance 6554a3f Imported Translations from Zanata 7edc346 Fix translation test 408114a Fix pre_test_hook fail and sidebar menu fail c6bc96c Imported Translations from Zanata e9b8368 Fix tests broken by novaclient 4.0.0 release ec4fdd8 Fix longtime tests 722a7b3 Pass environment data to update stack action ecb8f46 Use Chrome for JS unit tests 41e8525 Imported Translations from Zanata e212650 Imported Translations from Zanata 6ee3340 Fix Nova test data and selenium tests 08bfbb8 Imported Translations from Zanata e49c347 Fix new Swift UI to work with Ceph backend c0e04d4 Prevent transfer tables expanding out of modal 61bf0f9 Minor ng containers cleanup Diffstat (except docs and test files) ------------------------------------- horizon/karma.conf.js | 10 +- horizon/locale/ca/LC_MESSAGES/django.po | 6 +- horizon/locale/cs/LC_MESSAGES/django.po | 25 +- horizon/locale/cs/LC_MESSAGES/djangojs.po | 23 +- horizon/locale/de/LC_MESSAGES/django.po | 12 +- horizon/locale/de/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/django.pot | 530 - horizon/locale/djangojs.pot | 614 - horizon/locale/en_AU/LC_MESSAGES/django.po | 6 +- horizon/locale/en_AU/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/en_GB/LC_MESSAGES/django.po | 15 +- horizon/locale/en_GB/LC_MESSAGES/djangojs.po | 37 +- horizon/locale/es/LC_MESSAGES/django.po | 123 +- horizon/locale/es/LC_MESSAGES/djangojs.po | 123 +- horizon/locale/es_MX/LC_MESSAGES/django.po | 6 +- horizon/locale/fi_FI/LC_MESSAGES/django.po | 6 +- horizon/locale/fil/LC_MESSAGES/django.po | 6 +- horizon/locale/fr/LC_MESSAGES/django.po | 6 +- horizon/locale/fr/LC_MESSAGES/djangojs.po | 106 +- horizon/locale/hi/LC_MESSAGES/django.po | 6 +- horizon/locale/hi/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/hu/LC_MESSAGES/django.po | 6 +- horizon/locale/id/LC_MESSAGES/django.po | 6 +- horizon/locale/it/LC_MESSAGES/django.po | 6 +- horizon/locale/it/LC_MESSAGES/djangojs.po | 15 +- horizon/locale/ja/LC_MESSAGES/django.po | 11 +- horizon/locale/ja/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/ko_KR/LC_MESSAGES/django.po | 6 +- horizon/locale/ko_KR/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/nl_NL/LC_MESSAGES/django.po | 6 +- horizon/locale/nl_NL/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pa_IN/LC_MESSAGES/django.po | 6 +- horizon/locale/pa_IN/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pl_PL/LC_MESSAGES/django.po | 6 +- horizon/locale/pl_PL/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pt/LC_MESSAGES/django.po | 6 +- horizon/locale/pt_BR/LC_MESSAGES/django.po | 62 +- horizon/locale/pt_BR/LC_MESSAGES/djangojs.po | 86 +- horizon/locale/ru/LC_MESSAGES/django.po | 6 +- horizon/locale/ru/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/sl_SI/LC_MESSAGES/django.po | 6 +- horizon/locale/sr/LC_MESSAGES/django.po | 6 +- horizon/locale/sr/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/te_IN/LC_MESSAGES/djangojs.po | 442 + horizon/locale/tr_TR/LC_MESSAGES/django.po | 6 +- horizon/locale/tr_TR/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/zh_CN/LC_MESSAGES/django.po | 104 +- horizon/locale/zh_CN/LC_MESSAGES/djangojs.po | 104 +- horizon/locale/zh_TW/LC_MESSAGES/django.po | 29 +- horizon/locale/zh_TW/LC_MESSAGES/djangojs.po | 31 +- .../static/framework/util/filters/filters.spec.js | 2 +- .../framework/widgets/charts/pie-chart.spec.js | 2 +- .../widgets/metadata/tree/metadata-tree.html | 2 +- .../widgets/metadata/tree/tree.service.js | 19 +- .../framework/widgets/metadata/tree/tree.spec.js | 3 +- .../framework/widgets/modal/simple-modal.html | 2 +- horizon/static/horizon/js/horizon.forms.js | 28 +- horizon/test/webdriver.py | 82 +- horizon/themes.py | 18 +- horizon/utils/babel_extract_angular.py | 31 +- openstack_dashboard/api/rest/swift.py | 7 +- openstack_dashboard/api/swift.py | 7 +- .../dashboards/project/networks/workflows.py | 4 +- .../dashboards/project/stacks/forms.py | 3 + .../containers/containers-model.service.spec.js | 14 +- .../project/containers/create-container-modal.html | 4 +- .../project/containers/create-folder-modal.html | 17 +- .../project/containers/object-details-modal.html | 6 +- .../dashboard/project/containers/objects.html | 4 +- .../project/containers/upload-object-modal.html | 15 +- .../workflow/launch-instance/details/details.html | 8 +- .../keypair/import-keypair.controller.js | 4 +- .../keypair/import-keypair.controller.spec.js | 4 +- openstack_dashboard/karma.conf.js | 10 +- .../locale/as/LC_MESSAGES/django.po | 6 +- .../locale/bn_IN/LC_MESSAGES/django.po | 6 +- .../locale/brx/LC_MESSAGES/django.po | 6 +- .../locale/cs/LC_MESSAGES/django.po | 6 +- .../locale/cs/LC_MESSAGES/djangojs.po | 17 +- .../locale/de/LC_MESSAGES/django.po | 286 +- .../locale/de/LC_MESSAGES/djangojs.po | 72 +- openstack_dashboard/locale/django.pot | 15538 ------------------- openstack_dashboard/locale/djangojs.pot | 3095 ---- .../locale/en_AU/LC_MESSAGES/django.po | 6 +- .../locale/en_AU/LC_MESSAGES/djangojs.po | 27 +- .../locale/en_GB/LC_MESSAGES/django.po | 427 +- .../locale/en_GB/LC_MESSAGES/djangojs.po | 6 +- .../locale/es/LC_MESSAGES/django.po | 4425 +++--- .../locale/es/LC_MESSAGES/djangojs.po | 1386 +- .../locale/fr/LC_MESSAGES/django.po | 4032 ++--- .../locale/fr/LC_MESSAGES/djangojs.po | 738 +- .../locale/gu/LC_MESSAGES/django.po | 6 +- .../locale/hi/LC_MESSAGES/django.po | 6 +- .../locale/it/LC_MESSAGES/django.po | 9 +- .../locale/it/LC_MESSAGES/djangojs.po | 38 +- .../locale/ja/LC_MESSAGES/django.po | 6 +- .../locale/ja/LC_MESSAGES/djangojs.po | 27 +- .../locale/kn/LC_MESSAGES/django.po | 6 +- .../locale/ko_KR/LC_MESSAGES/django.po | 477 +- .../locale/ko_KR/LC_MESSAGES/djangojs.po | 62 +- .../locale/kok/LC_MESSAGES/django.po | 6 +- .../locale/ks/LC_MESSAGES/django.po | 6 +- .../locale/mai/LC_MESSAGES/django.po | 6 +- .../locale/mni/LC_MESSAGES/django.po | 6 +- .../locale/mr/LC_MESSAGES/django.po | 6 +- .../locale/ne/LC_MESSAGES/django.po | 6 +- .../locale/nl_NL/LC_MESSAGES/django.po | 6 +- .../locale/pa_IN/LC_MESSAGES/django.po | 6 +- .../locale/pl_PL/LC_MESSAGES/django.po | 6 +- .../locale/pl_PL/LC_MESSAGES/djangojs.po | 6 +- .../locale/pt_BR/LC_MESSAGES/django.po | 2655 ++-- .../locale/pt_BR/LC_MESSAGES/djangojs.po | 524 +- .../locale/ru/LC_MESSAGES/django.po | 6 +- .../locale/ru/LC_MESSAGES/djangojs.po | 29 +- .../locale/sr/LC_MESSAGES/django.po | 6 +- .../locale/ta/LC_MESSAGES/django.po | 6 +- .../locale/tr_TR/LC_MESSAGES/django.po | 6 +- .../locale/tr_TR/LC_MESSAGES/djangojs.po | 6 +- .../locale/ur/LC_MESSAGES/django.po | 6 +- .../locale/zh_CN/LC_MESSAGES/django.po | 31 +- .../locale/zh_CN/LC_MESSAGES/djangojs.po | 725 +- .../locale/zh_TW/LC_MESSAGES/django.po | 3353 ++-- .../locale/zh_TW/LC_MESSAGES/djangojs.po | 312 +- .../static/dashboard/scss/_variables.scss | 4 + .../static/dashboard/scss/components/_navbar.scss | 11 + .../scss/components/_transfer_tables.scss | 6 + openstack_dashboard/test/test_data/nova_data.py | 35 +- package.json | 6 +- requirements.txt | 4 +- tools/gate/integration/pre_test_hook.sh | 1 - 141 files changed, 12495 insertions(+), 29158 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a0fa350..09da781 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ pbr>=1.6 # Apache-2.0 -Babel>=1.3 # BSD +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD @@ -33 +33 @@ python-heatclient>=0.6.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,<3.0.0,>=1.6.0 # Apache-2.0

1 0

[OSSA-2016-008] Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass (CVE-2016-4911)
by morgan fainberg 03 Jun '16

03 Jun '16

============================================================================================ OSSA-2016-008: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass ============================================================================================ :Date: May 23, 2016 :CVE: CVE-2016-4911 Affects ~~~~~~~ - Keystone: ==9.0.0 Description ~~~~~~~~~~~ Lance Bragstad (Rackspace) reported a vulnerability in the Keystone Fernet Token Provider. By rescoping a token a user will receive a new token without correct audit_ids, these incorrect audit_ids will prevent the entire chain of tokens from being revoked properly. This vulnerability does not impact revoking a token by its individual audit_id. Only deployments with Keystone configured to use Fernet tokens are impacted. Patches ~~~~~~~ - https://review.openstack.org/#/c/312582/ (Mitaka) - https://review.openstack.org/#/c/311886/ (Newton) Credits ~~~~~~~ - Lance Bragstad from Rackspace (CVE-2016-4911) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1577558 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4911 Notes ~~~~~ - This fix was included in the openstack/keystone 9.0.1 (mitaka) release. -- Morgan Fainberg OpenStack Vulnerability Management Team

1 0

[new][sahara] python-saharaclient 0.15.0 release (newton)
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are thrilled to announce the release of: python-saharaclient 0.15.0: Client library for Sahara API This release is part of the newton release series. With source available at: https://git.openstack.org/cgit/openstack/python-saharaclient With package available at: https://pypi.python.org/pypi/python-saharaclient Please report issues through launchpad: https://bugs.launchpad.net/python-saharaclient For more details, please see below. 0.15.0 ^^^^^^ Upgrade Notes ************* * Option 'version' is replaced by 'plugin-version' option. Bug Fixes ********* * Option 'version' is a global option, which is used for getting the client version. So there were problems with the OpenStack client, when we specified 'version' of the plugin, but OSC treated that as a request for getting the current client version. Hence, to fix this problem, 'version' is replaced by 'plugin-version'. Related bug 1565775. Changes in python-saharaclient 0.13.0..0.15.0 --------------------------------------------- f02ea89 Change plugin version 'version' parameter to 'plugin-version' 1fd405c Updated from global requirements 7f40491 Updated from global requirements 4944304 Updated from global requirements 19175d5 Updated from global requirements 19b02b7 Updated from global requirements d4389a1 Updated from global requirements 9621abe Updated from global requirements 079e839 Updated from global requirements c279df9 Remove integration tests from saharaclient afd81b7 Update reno for stable/mitaka 6a5f3e1 Updated from global requirements 409c48b Remove unused pngmath Sphinx extension Diffstat (except docs and test files) ------------------------------------- ...version_to_plugin-version-20cfe17530446391.yaml | 10 + releasenotes/source/index.rst | 1 + releasenotes/source/mitaka.rst | 6 + requirements.txt | 10 +- saharaclient/osc/v1/cluster_templates.py | 30 +- saharaclient/osc/v1/clusters.py | 20 +- saharaclient/osc/v1/job_types.py | 12 +- saharaclient/osc/v1/node_group_templates.py | 34 +-- saharaclient/osc/v1/plugins.py | 13 +- .../integration/configs/itest.conf.sample-full | 273 ----------------- test-requirements.txt | 10 +- tox.ini | 6 - 38 files changed, 161 insertions(+), 2023 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1b0f282..519264a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7,2 @@ pbr>=1.6 # Apache-2.0 -Babel>=1.3 # BSD -cliff!=1.16.0,>=1.15.0 # Apache-2.0 +Babel>=2.3.4 # BSD +cliff!=1.16.0,!=1.17.0,>=1.15.0 # Apache-2.0 @@ -13,2 +13,2 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.utils>=3.5.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +oslo.utils>=3.11.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.7.0 # Apache-2.0 @@ -16 +16 @@ python-openstackclient>=2.1.0 # Apache-2.0 -requests!=2.9.0,>=2.8.1 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a9c5ba3..d91624b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9 @@ discover # BSD -mock>=1.2 # BSD -oslo.config>=3.7.0 # Apache-2.0 +mock>=2.0 # BSD @@ -13,5 +12,2 @@ oslotest>=1.10.0 # Apache-2.0 -os-testr>=0.4.1 # Apache-2.0 -python-neutronclient>=2.6.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 -python-swiftclient>=2.2.0 # Apache-2.0 -reno>=0.1.1 # Apache2 +os-testr>=0.7.0 # Apache-2.0 +reno>=1.6.2 # Apache2

1 0

[new][neutron] neutron-vpnaas 7.1.0 release (liberty)
by no-reply＠openstack.org 01 Jun '16

01 Jun '16

We are happy to announce the release of: neutron-vpnaas 7.1.0: OpenStack Networking VPN as a Service This release is part of the liberty stable release series. For more details, please see below. Changes in neutron-vpnaas 7.0.4..7.1.0 -------------------------------------- 4f1971b Update devstack plugin for dependent packages Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 1 + 1 file changed, 1 insertion(+)

1 0

[new][neutron] neutron-lbaas 7.1.0 release (liberty)
by no-reply＠openstack.org 01 Jun '16

01 Jun '16

We are pleased to announce the release of: neutron-lbaas 7.1.0: OpenStack Networking Load Balancing as a Service This release is part of the liberty stable release series. For more details, please see below. Changes in neutron-lbaas 7.0.4..7.1.0 ------------------------------------- 0674621 Make all tox targets constrained bfc8b51 Update local.conf to use Cirros 0.3.4 c65ca64 Pass config info in neutron-lbaas api v2 tempest tests 0b7b089 Fix scenario tests for octavia driver Diffstat (except docs and test files) ------------------------------------- devstack/samples/local.conf | 2 +- .../v2/scenario/test_healthmonitor_basic.py | 7 --- .../tempest/v2/scenario/test_listener_basic.py | 8 +-- tools/tox_install.sh | 14 ++++- tox.ini | 10 +++- 7 files changed, 95 insertions(+), 49 deletions(-)

1 0

[new][neutron] neutron-fwaas 7.1.0 release (liberty)
by no-reply＠openstack.org 01 Jun '16

01 Jun '16

We are pumped to announce the release of: neutron-fwaas 7.1.0: OpenStack Networking FWaaS This release is part of the liberty stable release series. For more details, please see below. 7.1.0 ^^^^^ Enable quotas for FWaaS. New Features ************ * The FWaaS extension can register quotas. The default values for quota_firewall, quota_firewall_policy, and quota_firewall_rule are set to -1 (unlimited). Known Issues ************ * Tenants may receive a 409 Conflict error with a message body containing a quota exceeded message during resource creation if their quota is exceeded. Other Notes *********** * Operators that increase the default limit for quota_routers from 10 may want to bump FWaaS quotas as well, since with router insertion a tenant can potentially have a unique policy and firewall for each router. Changes in neutron-fwaas 7.0.2..7.1.0 ------------------------------------- 1909e55 Make all tox targets constrained 2ce8b58 FWaaS quota registration d578ac7 Consume FWaaS plugin queue in RPC workers Diffstat (except docs and test files) ------------------------------------- neutron_fwaas/extensions/firewall.py | 9 +++-- neutron_fwaas/services/firewall/fwaas_plugin.py | 15 ++++--- .../unit/services/firewall/test_fwaas_plugin.py | 19 +++++++-- .../notes/enable-quotas-a3d0a21743bb1985.yaml | 17 ++++++++ tools/tox_install.sh | 46 ++++++++++++++++++++++ tox.ini | 12 ++++-- 6 files changed, 102 insertions(+), 16 deletions(-)

1 0