- OpenStack-announce - lists.openstack.org

[release][stable][swift] python-swiftclient release 2.3.2 (juno)
by doug＠doughellmann.com 28 Aug '15

28 Aug '15

We are pleased to announce the release of: python-swiftclient 2.3.2: OpenStack Object Storage API Client Library This release is part of the juno stable release series, and is only meant to be used in the OpenStack CI environment. Users should download a more recent client built from master. With package available at: https://pypi.python.org/pypi/python-swiftclient For more details, please see the git log history below. Changes in python-swiftclient 2.3.1..2.3.2 ------------------------------------------ c213ffd Update from global requirements dfdbfe2 Update .gitreview for stable/juno Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 11 +++++++---- setup.py | 9 ++++++++- test-requirements.txt | 21 ++++++++++++--------- tox.ini | 10 ++++++++++ 5 files changed, 38 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e7c0d41..19377ff 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,7 @@ -futures>=2.1.3 -requests>=1.1 -simplejson>=2.0.9 -six>=1.5.2 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +futures<=2.2.0,>=2.1.6 +requests!=2.4.0,<=2.2.1,>=2.1.0 +simplejson<=3.3.1,>=2.2.0 +six<=1.9.0,>=1.7.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5427920..efbbee3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1,4 @@ -hacking>=0.8.0,<0.9 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +hacking<0.9,>=0.8.0 @@ -3,8 +6,8 @@ hacking>=0.8.0,<0.9 -coverage>=3.6 -discover -mock>=1.0 -oslosphinx -python-keystoneclient>=0.7.0 -sphinx>=1.1.2,<1.2 -testrepository>=0.0.18 -testtools>=0.9.34 +coverage<=3.7.1,>=3.6 +discover<=0.4.0 +mock<=1.0.1,>=1.0 +oslosphinx<2.5.0,>=2.2.0 # Apache-2.0 +python-keystoneclient<1.2.0,>=0.10.0 +sphinx!=1.2.0,<1.3,>=1.1.2 +testrepository<=0.0.20,>=0.0.18 +testtools!=1.4.0,<=1.5.0,>=0.9.34

1 0

[release][keystone] keystoneauth release 0.4.0 (liberty)
by doug＠doughellmann.com 27 Aug '15

27 Aug '15

We are thrilled to announce the release of: keystoneauth 0.4.0: Authentication Libarary for OpenStack Identity This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/keystoneauth With package available at: https://pypi.python.org/pypi/keystoneauth1 For more details, please see the git log history below and: http://launchpad.net/keystoneauth/+milestone/0.4.0 Please report issues through launchpad: http://bugs.launchpad.net/keystoneauth Changes in keystoneauth1 0.3.0..0.4.0 ------------------------------------- 8863d17 Fix plugin loading tests 36ef235 Keep a consistent logger name for keystoneauth d6e033d Fix v2 plugin loaders to not have V2 prefix 9b99420 Do not log binary data during debug 6be3ae7 Clean up exception messages 2a80dc5 Port in the argument scrubbing from OCC b337251 Add required property to Opt class cf4ef2c Rename the actual plugin class to AdminToken 3633d36 Expose admin_token plugin c7f6042 Use human readable exception messages 22e1f88 Updated from global requirements d227f6d Replace endpoint_type with interface in catalog 65cbe50 Remove service_type requirement from catalog searching 2aa4d83 Allow searching a catalog on service or endpoint id 5bc8e48 Import service catalog tests from keystoneclient a00d82a Make missingproperty private 9973144 Move AccessInfo objects into own module 64ccd3c Add role_ids, role_names to v3 fixture 4465131 Update .gitignore 460ee28 Move session loading into loading module 5e74fed Remove oslo_config from auth plugin loading efcadd6 Split plugin loading a08ca8f Remove auth/ directory ac6c043 Updated from global requirements 2c576b1 py34 not py33 is tested and supported c7e3c76 Updated from global requirements 4b09541 Set reasonable defaults for TCP Keep-Alive c7492e7 Fix decorators of properties in AccessToken 09503fc Expose bug in AccessToken 0120a21 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- keystoneauth1/_utils.py | 7 +- keystoneauth1/access.py | 703 -------------------- keystoneauth1/access/__init__.py | 19 + keystoneauth1/access/access.py | 709 +++++++++++++++++++++ keystoneauth1/access/service_catalog.py | 295 +++++++++ keystoneauth1/access/service_providers.py | 44 ++ keystoneauth1/auth/__init__.py | 38 -- keystoneauth1/auth/base.py | 390 ------------ keystoneauth1/auth/cli.py | 85 --- keystoneauth1/auth/conf.py | 111 ---- keystoneauth1/auth/identity/__init__.py | 37 -- keystoneauth1/auth/identity/access.py | 47 -- keystoneauth1/auth/identity/base.py | 326 ---------- keystoneauth1/auth/identity/generic/__init__.py | 21 - keystoneauth1/auth/identity/generic/base.py | 181 ------ keystoneauth1/auth/identity/generic/password.py | 84 --- keystoneauth1/auth/identity/generic/token.py | 52 -- keystoneauth1/auth/identity/v2.py | 195 ------ keystoneauth1/auth/identity/v3/__init__.py | 33 - keystoneauth1/auth/identity/v3/base.py | 252 -------- keystoneauth1/auth/identity/v3/federation.py | 114 ---- keystoneauth1/auth/identity/v3/k2k.py | 199 ------ keystoneauth1/auth/identity/v3/password.py | 88 --- keystoneauth1/auth/identity/v3/token.py | 65 -- keystoneauth1/auth/token_endpoint.py | 54 -- keystoneauth1/discover.py | 3 +- keystoneauth1/exceptions/auth.py | 3 +- keystoneauth1/exceptions/auth_plugins.py | 31 +- keystoneauth1/exceptions/base.py | 9 + keystoneauth1/exceptions/catalog.py | 8 +- keystoneauth1/exceptions/connection.py | 12 +- keystoneauth1/exceptions/discovery.py | 4 +- keystoneauth1/exceptions/response.py | 2 +- keystoneauth1/fixture/v3.py | 8 + keystoneauth1/identity/__init__.py | 37 ++ keystoneauth1/identity/access.py | 47 ++ keystoneauth1/identity/base.py | 312 +++++++++ keystoneauth1/identity/generic/__init__.py | 21 + keystoneauth1/identity/generic/base.py | 158 +++++ keystoneauth1/identity/generic/password.py | 63 ++ keystoneauth1/identity/generic/token.py | 37 ++ keystoneauth1/identity/v2.py | 156 +++++ keystoneauth1/identity/v3/__init__.py | 33 + keystoneauth1/identity/v3/base.py | 232 +++++++ keystoneauth1/identity/v3/federation.py | 100 +++ keystoneauth1/identity/v3/k2k.py | 187 ++++++ keystoneauth1/identity/v3/password.py | 71 +++ keystoneauth1/identity/v3/token.py | 51 ++ keystoneauth1/loading/__init__.py | 39 ++ keystoneauth1/loading/_plugins/__init__.py | 0 .../loading/_plugins/identity/__init__.py | 0 .../loading/_plugins/identity/admin_token.py | 34 + keystoneauth1/loading/_plugins/identity/base.py | 25 + keystoneauth1/loading/_plugins/identity/generic.py | 74 +++ keystoneauth1/loading/_plugins/identity/v2.py | 66 ++ keystoneauth1/loading/_plugins/identity/v3.py | 91 +++ keystoneauth1/loading/base.py | 266 ++++++++ keystoneauth1/loading/cli.py | 85 +++ keystoneauth1/loading/conf.py | 110 ++++ keystoneauth1/loading/opts.py | 102 +++ keystoneauth1/loading/session.py | 229 +++++++ keystoneauth1/plugin.py | 199 ++++++ keystoneauth1/service_catalog.py | 269 -------- keystoneauth1/service_providers.py | 44 -- keystoneauth1/session.py | 240 +------ keystoneauth1/token_endpoint.py | 38 ++ requirements.txt | 5 +- setup.cfg | 18 +- setup.py | 3 +- test-requirements.txt | 21 +- tox.ini | 2 +- 93 files changed, 5230 insertions(+), 4092 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7159904..f1e4df1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7 @@ iso8601>=0.1.9 -oslo.config>=1.9.3 # Apache-2.0 -requests>=2.2.0,!=2.4.0 +requests>=2.5.2 @@ -10 +9 @@ six>=1.9.0 -stevedore>=1.3.0 # Apache-2.0 +stevedore>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 430150b..76c2d85 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=0.10.0,<0.11 +hacking<0.11,>=0.10.0 @@ -9,3 +9,3 @@ discover -fixtures>=0.3.14 -keyring>=2.1,!=3.3 -mock>=1.0 +fixtures>=1.3.1 +keyring!=3.3,>=2.1 +mock>=1.2 @@ -14,2 +14,3 @@ oauthlib>=0.6 -oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.5.1 # Apache-2.0 +oslo.config>=2.1.0 # Apache-2.0 +oslosphinx>=2.5.0 # Apache-2.0 +oslotest>=1.10.0 # Apache-2.0 @@ -17,3 +18,3 @@ pycrypto>=2.6 -requests-mock>=0.6.0 # Apache-2.0 -sphinx>=1.1.2,!=1.2.0,!=1.3b1,<1.3 -tempest-lib>=0.4.0 +requests-mock>=0.6.0 # Apache-2.0 +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 +tempest-lib>=0.6.1 @@ -22 +23 @@ testresources>=0.2.4 -testtools>=0.9.36,!=1.2.0 +testtools>=1.4.0

1 0

[release][oslo] tooz release 1.23.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are pumped to announce the release of: tooz 1.23.0: Coordination library for distributed systems. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/tooz With package available at: https://pypi.python.org/pypi/tooz For more details, please see the git log history below and: http://launchpad.net/python-tooz/+milestone/1.23.0 Please report issues through launchpad: http://bugs.launchpad.net/python-tooz/ Changes in tooz 1.22.0..1.23.0 ------------------------------ 3fca529 Changes to add driver list to the documentation. 7cfb552 Updated from global requirements 6b1f477 Make RedisLock's init consistent with other locks Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- tooz/drivers/redis.py | 23 ++++++++++------------- 4 files changed, 18 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d31fbf7..2b0998f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0,>=1.4 +pbr<2.0,>=1.6

1 0

[release][oslo] oslo.reports release 0.5.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are chuffed to announce the release of: oslo.reports 0.5.0: oslo.reports library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.reports With package available at: https://pypi.python.org/pypi/oslo.reports For more details, please see the git log history below and: http://launchpad.net/oslo.reports/+milestone/0.5.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.reports Changes in oslo.reports 0.4.0..0.5.0 ------------------------------------ ce8d48d Updated from global requirements 7fae8f8 Updated from global requirements c8980d9 Add a configuration for the directory to generate gmr cf90c58 Fill README from information in the wiki 57d6c1e Updated from global requirements 5a92d60 Setup translations f1709f8 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- README.rst | 35 ++++++++++++- oslo.reports/locale/oslo.reports-log-critical.pot | 20 ++++++++ oslo.reports/locale/oslo.reports-log-error.pot | 20 ++++++++ oslo.reports/locale/oslo.reports-log-info.pot | 20 ++++++++ oslo.reports/locale/oslo.reports-log-warning.pot | 20 ++++++++ oslo.reports/locale/oslo.reports.pot | 20 ++++++++ oslo_reports/_i18n.py | 35 +++++++++++++ oslo_reports/guru_meditation_report.py | 21 ++++++-- oslo_reports/opts.py | 61 +++++++++++++++++++++++ requirements.txt | 4 +- setup.cfg | 4 ++ test-requirements.txt | 4 +- 12 files changed, 254 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4e1d09..08a86c6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0,>=1.3 +pbr<2.0,>=1.6 @@ -12 +12 @@ oslo.i18n>=1.5.0 # Apache-2.0 -oslo.utils>=1.9.0 # Apache-2.0 +oslo.utils>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 33d5d48..eb02b41 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.0 -oslotest>=1.9.0 # Apache-2.0 +oslotest>=1.10.0 # Apache-2.0 @@ -13 +13 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslo.config>=1.11.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[release][oslo] oslo.middleware release 2.8.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are jazzed to announce the release of: oslo.middleware 2.8.0: Oslo Middleware library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.middleware With package available at: https://pypi.python.org/pypi/oslo.middleware For more details, please see the git log history below and: http://launchpad.net/oslo.middleware/+milestone/2.8.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.middleware Changes in oslo.middleware 2.7.0..2.8.0 --------------------------------------- ea893e8 Split option discovery function by middleware 6e7167c Updated from global requirements 95b735d Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_middleware/opts.py | 83 +++++++++++++++++++++++++++++++++++++- requirements.txt | 4 +- setup.cfg | 3 ++ 7 files changed, 138 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1d4091e..ecab230 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0,>=1.4 +pbr<2.0,>=1.6 @@ -7 +7 @@ Babel>=1.3 -oslo.config>=2.1.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[release][oslo] oslo.cache release 0.7.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are pumped to announce the release of: oslo.cache 0.7.0: Cache storage for Openstack projects. This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.cache With package available at: https://pypi.python.org/pypi/oslo.cache For more details, please see the git log history below and: http://launchpad.net/oslo.cache/+milestone/0.7.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.cache Changes in oslo.cache 0.6.0..0.7.0 ---------------------------------- 24f10af Updated from global requirements 0a7c3bf Implement get/set/delete multiple keys for dictionary backend Diffstat (except docs and test files) ------------------------------------- oslo_cache/backends/dictionary.py | 24 +++++++++++++++++++++++- requirements.txt | 2 +- 3 files changed, 45 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 965e06e..c8db072 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ six>=1.9.0 -oslo.config>=2.1.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[release][oslo] oslo.versionedobjects release 0.9.0 (liberty)
by davanum＠gmail.com 27 Aug '15

27 Aug '15

We are tickled pink to announce the release of: oslo.versionedobjects 0.9.0: Oslo Versioned Objects library This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/oslo.versionedobjects With package available at: https://pypi.python.org/pypi/oslo.versionedobjects For more details, please see the git log history below and: http://launchpad.net/oslo.versionedobjects/+milestone/0.9.0 Please report issues through launchpad: http://bugs.launchpad.net/oslo.versionedobjects Changes in oslo.versionedobjects 0.8.0..0.9.0 --------------------------------------------- bbb52b5 Updated from global requirements 00c503e Allow calling obj_to_primitive() with version_manifest Diffstat (except docs and test files) ------------------------------------- oslo_versionedobjects/base.py | 6 ++++-- requirements.txt | 2 +- 3 files changed, 12 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 48050d2..28b8550 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ oslo.concurrency>=2.3.0 # Apache-2.0 -oslo.config>=2.1.0 # Apache-2.0 +oslo.config>=2.3.0 # Apache-2.0

1 0

[OSSA 2015-016] Information leak via Swift tempurls (CVE-2015-5223)
by Tristan Cacqueray 26 Aug '15

26 Aug '15

================================================== OSSA-2015-016: Information leak via Swift tempurls ================================================== :Date: August 26, 2015 :CVE: CVE-2015-5223 Affects ~~~~~~~ - Swift: versions through 2.3.0 Description ~~~~~~~~~~~ Richard Hawkins from Rackspace and Swift core reviewers reported a vulnerability in Swift tempurls. When in possession of a tempurl key authorized for PUT, a malicious actor may retrieve other objects in the same Swift account (tenant). All Swift setups are affected. Patches ~~~~~~~ - https://review.openstack.org/217253 (Juno) - https://review.openstack.org/217254 (Kilo) - https://review.openstack.org/217255 (Kilo) - https://review.openstack.org/217259 (Liberty) - https://review.openstack.org/217260 (Liberty) Credits ~~~~~~~ - Richard Hawkins from Rackspace (CVE-2015-5223) - Swift core reviewers from OpenStack (CVE-2015-5223) References ~~~~~~~~~~ - https://launchpad.net/bugs/1453948 - https://launchpad.net/bugs/1449212 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5223 Notes ~~~~~ - This fix will be included in future 2014.2.4 (juno) and 2015.1.2 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][documentation] openstack-doc-tools release 0.30.1 (liberty)
by doug＠doughellmann.com 26 Aug '15

26 Aug '15

We are amped to announce the release of: openstack-doc-tools 0.30.1: Installed /mnt/repos/openstack-infra /release-tools/release-tag-openstack-doc-tools-nIf/openstack /openstack-doc-tools/.eggs/pbr-1.6.0-py2.7.egg [pbr] Generating ChangeLog Tools for OpenStack Documentation This release is part of the liberty release series. With source available at: http://git.openstack.org/cgit/openstack/openstack-doc-tools With package available at: https://pypi.python.org/pypi/openstack-doc-tools For more details, please see the git log history below and: http://launchpad.net/openstack-manuals/+milestone/0.30.1 Please report issues through launchpad: http://bugs.launchpad.net/openstack-manuals Changes in openstack-doc-tools 0.30.0..0.30.1 --------------------------------------------- bd539fc Fix Install Guide builds dba8e4a Fix mis-option identification for doc-tools-update-cli-reference 11e46da autohelp: add oslo.service to the list of extensions 5b21d5f [sitemap] transform README from Markdown to reStructuredText 8a2df7b [sitemap] resolve several ScrapyDeprecationWarning exceptions Diffstat (except docs and test files) ------------------------------------- RELEASE_NOTES.rst | 6 ++++++ autogenerate_config_docs/autohelp.py | 3 ++- bin/doc-tools-check-languages | 13 ++++++++++++ os_doc_tools/commands.py | 24 +++++++++++++--------- sitemap/README.md | 39 ------------------------------------ sitemap/README.rst | 36 +++++++++++++++++++++++++++++++++ sitemap/generator/settings.py | 4 ++-- sitemap/generator/spiders/sitemap.py | 4 ++-- 8 files changed, 76 insertions(+), 53 deletions(-)

1 0

[OSSA 2015-015] Nova instance migration process does not stop when instance is deleted (CVE-2015-3241)
by Tristan Cacqueray 25 Aug '15

25 Aug '15

===================================================================================== OSSA-2015-015: Nova instance migration process does not stop when instance is deleted ===================================================================================== :Date: August 25, 2015 :CVE: CVE-2015-3241 Affects ~~~~~~~ - Nova: versions through 2014.2.3 and 2015.1 versions through 2015.1.1 Description ~~~~~~~~~~~ George Shuklin from Webzilla LTD reported a vulnerability in Nova migration process. By resizing and deleting an instance repeatedly an authenticated user may overcome his quota and overload Nova computes node resulting in a denial of service attack. All Nova setups are affected. Patches ~~~~~~~ - https://review.openstack.org/208876 (Juno) - https://review.openstack.org/214528 (Juno) - https://review.openstack.org/213234 (Kilo) - https://review.openstack.org/209856 (Kilo) - https://review.openstack.org/194861 (Liberty) - https://review.openstack.org/192986 (Liberty) Credits ~~~~~~~ - George Shuklin from Webzilla LTD (CVE-2015-3241) References ~~~~~~~~~~ - https://launchpad.net/bugs/1387543 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3241 Notes ~~~~~ - This fix requires oslo.concurrency >= 1.8.2 for Kilo and >= 2.3.0 for Liberty. Juno fix embeds a patched version of oslo.concurrency. - This fix will be included in future 2014.2.4 (juno) and 2015.1.2 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0