- OpenStack-announce - lists.openstack.org

[new][openstackansible] openstack-ansible-os_cinder 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are pumped to announce the release of: openstack-ansible-os_cinder 13.1.2: os_cinder role for OpenStack- Ansible For more details, please see below. Changes in openstack-ansible-os_cinder 13.1.1..13.1.2 ----------------------------------------------------- 12a1e1c Added task to install apt packages idependent of the cinder-volume backend Diffstat (except docs and test files) ------------------------------------- tasks/cinder_install_apt.yml | 14 +++++++++++++- vars/ubuntu-14.04.yml | 4 +++- 2 files changed, 16 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are chuffed to announce the release of: openstack-ansible-os_aodh 13.1.2: os_aodh for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_aodh 13.1.0..13.1.2 --------------------------------------------------- 1621cce Add dependencies for paramiko 2.0 60853e6 Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are excited to announce the release of: openstack-ansible-os_ceilometer 13.1.2: os_ceilometer role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.1.0..13.1.2 --------------------------------------------------------- abec6e0 Role tests should test against the same branch 71017f7 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_keystone 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are amped to announce the release of: openstack-ansible-os_keystone 13.1.2: os_keystone for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_keystone 13.1.0..13.1.2 ------------------------------------------------------- 4bbf773 Add dependencies for paramiko 2.0 e30c429 Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 16 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are gleeful to announce the release of: openstack-ansible 13.1.2: Ansible playbooks for deploying OpenStack With source available at: http://git.openstack.org/cgit/openstack/openstack-ansible For more details, please see below. 13.1.2 ^^^^^^ New Features ************ * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True The tasks in the os_horizon role will determine which LBaaS version is in use (via "neutron_plugin_base") and activate the correct panel for LBaaS v1 or v2. * Horizon's IPv6 support is now configurable with Ansible variables. Deployers can enable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: True Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * The openstack-ansible-memcached_server role includes a new override,`memcached_connections` which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * Allow the fallocate_reserve option to be set (in bytes) for Swift, to help prevent disks from filling up and prevent a situation where Swift is unable to remove objects due to a lack of disk space. The fallocate_reserve value to is set to a default of 10GB. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. Upgrade Notes ************* * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * A new nova admin endpoint will be registered with the suffix "/v2.1/%(tenant_id)s". The nova admin endpoint with the suffix "/v2/%(tenant_id)s" may be manually removed. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. Bug Fixes ********* * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * The nova admin endpoint is now correctly registered as "/v2.1/%(tenant_id)s" instead of "/v2/%(tenant_id)s". * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. Changes in openstack-ansible 13.1.1..13.1.2 ------------------------------------------- ad610f5 DOCS: Clarify guidance for deploy hosts b365fb6 Correct nova admin endpoint version 0811490 [DOCS] Adding missing kernel modules for VPNaaS 02e95f2 DOCS: Configuration section - cleanup 7d4304c DOCS: Configuration section - cleanup 21cfc94 DOCS: Configuration section - cleanup 1f448f1 Docs: Ops section - cleanup 654adf6 Add Ceilometer instructions to new compute node instructions 2cc1f7d Docs: Overview section - cleanup 2b4ec3f Docs: Target hosts section - cleanup 855ce1a Docs: Installation section - cleanup ed4a4cf Docs: Appendix section - cleanup b65fb14 DOCS: Deployment host section - cleanup 9786c96 Add upgrade guide to documentation index b154dc2 Updates all SHAs for 13.1.2 a186757 Ensure all role dependencies are consistently specified 29ec1ba DOCS: Clean up of the Mitaka upgrade guide Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 22 +- .../install-guide/configure-cinder-backup.rst | 79 ------- .../install-guide/configure-cinder-horizon.rst | 26 --- .../configure-configurationintegrity.rst | 19 +- .../configure-federation-idp-adfs.rst | 24 +- .../install-guide/configure-federation-idp.rst | 48 ++-- .../install-guide/configure-federation-mapping.rst | 64 +++--- .../configure-federation-sp-overview.rst | 63 ++--- .../install-guide/configure-federation-sp.rst | 76 +++---- .../configure-federation-use-case.rst | 162 +++++++------ .../install-guide/configure-federation-wrapper.rst | 95 ++++---- .../configure-ironic-baremetal-node.rst | 21 -- .../install-guide/configure-ironic-deployment.rst | 12 - .../install-guide/configure-ironic-flavor.rst | 30 --- .../install-guide/configure-ironic-images.rst | 66 ------ .../install-guide/configure-ironic-neutron.rst | 22 -- .../install-guide/configure-ironic-nodes.rst | 52 ----- .../configure-network-services-fwaas.rst | 53 ----- .../configure-network-services-lbaas.rst | 94 -------- .../configure-network-services-vpnaas.rst | 50 ---- .../install-guide/configure-network-services.rst | 220 +++++++++++++++++- .../install-guide/configure-sslcertificates.rst | 99 ++++---- .../install-guide/configure-swift-config.rst | 95 ++++---- .../install-guide/configure-swift-devices.rst | 26 +-- .../install-guide/configure-swift-glance.rst | 27 ++- .../install-guide/configure-swift-overview.rst | 23 -- .../install-guide/configure-swift-policies.rst | 20 +- .../install-guide/install-infrastructure.rst | 12 +- .../install-guide/targethosts-networkexample.rst | 3 +- .../install-guide/targethosts-networkrefarch.rst | 3 +- .../defaults/repo_packages/openstack_other.yml | 6 +- .../defaults/repo_packages/openstack_services.yml | 32 +-- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 6 +- ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 +- ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 13 ++ .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 ++ ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../notes/neutron-fwaas-5c7c6508f2cc05c3.yaml | 2 +- .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + .../nova-admin-endpoint-fix-d52cc00caa5ab5dd.yaml | 6 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 8 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + requirements.txt | 4 +- scripts/run-tempest.sh | 2 +- scripts/scripts-library.sh | 2 +- scripts/sources-branch-updater.sh | 10 +- 106 files changed, 2219 insertions(+), 2007 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3b50b96..1bfe1c0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,2 +11,2 @@ PyYAML>=3.1.0 # ansible -pip==8.1.1 -setuptools==21.0.0 +pip==8.1.2 +setuptools==21.1.0

1 0

[new][openstackansible] openstack-ansible-security 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are jazzed to announce the release of: openstack-ansible-security 13.1.2: Security hardening role for openstack-ansible For more details, please see below. 13.1.2 ^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. Changes in openstack-ansible-security 13.1.1..13.1.2 ---------------------------------------------------- b1db632 Handle Match properly in sshd_config df31e9a Removing equal signs in docs e2b3990 Switch from dict to individual variables f0f5367 Doc updates Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 103 ++++++++++----------- ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 ++ ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 2 +- ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 ++ tasks/auth.yml | 4 +- tasks/kernel.yml | 14 +-- tasks/services.yml | 26 +++--- tasks/sshd.yml | 74 ++++++++++++++- templates/osas-auditd.j2 | 50 +++++----- 42 files changed, 271 insertions(+), 163 deletions(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are delighted to announce the release of: openstack-ansible-memcached_server 13.1.2: memcached_server for OpenStack Ansible For more details, please see below. 13.1.2 ^^^^^^ New Features * The openstack-ansible-memcached_server role includes a new override,`memcached_connections` which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. Changes in openstack-ansible-memcached_server 13.1.1..13.1.2 ------------------------------------------------------------ 045b2d8 Configure nofile OS limit for memcached server role Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 1 + ...ached_server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 +++++++++ tasks/memcached_config.yml | 16 ++++++++++++++++ 3 files changed, 26 insertions(+)

1 0

[new][openstackansible] openstack-ansible-galera_server 13.1.2 release
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are glad to announce the release of: openstack-ansible-galera_server 13.1.2: Galera Server role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-galera_server 13.1.0..13.1.2 --------------------------------------------------------- 26ec8e8 Role tests should test against the same branch 290e729 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 11 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index da55ba7..3307388 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -17,0 +18,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][horizon] horizon 9.0.1 release (mitaka)
by no-reply＠openstack.org 03 Jun '16

03 Jun '16

We are pumped to announce the release of: horizon 9.0.1: OpenStack Dashboard This release is part of the mitaka stable release series. For more details, please see below. Changes in horizon 9.0.0..9.0.1 ------------------------------- 99dc305 Imported Translations from Zanata 838b824 UX: Misaligned OpenStack Logo 3c8c403 Django compressor cannot find custom theme templates 3639d3b Imported Translations from Zanata 52c0894 Fix untranslated strings in ng-instance 7896a2a Add scrolling to the projector selector 0ea1326 Imported Translations from Zanata cdde60c Change Metadata Display widget to case insensitive a597414 Fix workflow bug in "Create Network" dialog dfeacc2 Fix babel msgids to include tag attributes and entities c5779c7 "Clear Selection" is unlocalzed b398571 Fix existing metadata display in metadata widget 31b9439 Image create "Copy Data" checkbox wrong label 26e359b Imported Translations from Zanata f812b3c Updated from global requirements c570ee9 Fix key import in angular Launch Instance 6554a3f Imported Translations from Zanata 7edc346 Fix translation test 408114a Fix pre_test_hook fail and sidebar menu fail c6bc96c Imported Translations from Zanata e9b8368 Fix tests broken by novaclient 4.0.0 release ec4fdd8 Fix longtime tests 722a7b3 Pass environment data to update stack action ecb8f46 Use Chrome for JS unit tests 41e8525 Imported Translations from Zanata e212650 Imported Translations from Zanata 6ee3340 Fix Nova test data and selenium tests 08bfbb8 Imported Translations from Zanata e49c347 Fix new Swift UI to work with Ceph backend c0e04d4 Prevent transfer tables expanding out of modal 61bf0f9 Minor ng containers cleanup Diffstat (except docs and test files) ------------------------------------- horizon/karma.conf.js | 10 +- horizon/locale/ca/LC_MESSAGES/django.po | 6 +- horizon/locale/cs/LC_MESSAGES/django.po | 25 +- horizon/locale/cs/LC_MESSAGES/djangojs.po | 23 +- horizon/locale/de/LC_MESSAGES/django.po | 12 +- horizon/locale/de/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/django.pot | 530 - horizon/locale/djangojs.pot | 614 - horizon/locale/en_AU/LC_MESSAGES/django.po | 6 +- horizon/locale/en_AU/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/en_GB/LC_MESSAGES/django.po | 15 +- horizon/locale/en_GB/LC_MESSAGES/djangojs.po | 37 +- horizon/locale/es/LC_MESSAGES/django.po | 123 +- horizon/locale/es/LC_MESSAGES/djangojs.po | 123 +- horizon/locale/es_MX/LC_MESSAGES/django.po | 6 +- horizon/locale/fi_FI/LC_MESSAGES/django.po | 6 +- horizon/locale/fil/LC_MESSAGES/django.po | 6 +- horizon/locale/fr/LC_MESSAGES/django.po | 6 +- horizon/locale/fr/LC_MESSAGES/djangojs.po | 106 +- horizon/locale/hi/LC_MESSAGES/django.po | 6 +- horizon/locale/hi/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/hu/LC_MESSAGES/django.po | 6 +- horizon/locale/id/LC_MESSAGES/django.po | 6 +- horizon/locale/it/LC_MESSAGES/django.po | 6 +- horizon/locale/it/LC_MESSAGES/djangojs.po | 15 +- horizon/locale/ja/LC_MESSAGES/django.po | 11 +- horizon/locale/ja/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/ko_KR/LC_MESSAGES/django.po | 6 +- horizon/locale/ko_KR/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/nl_NL/LC_MESSAGES/django.po | 6 +- horizon/locale/nl_NL/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pa_IN/LC_MESSAGES/django.po | 6 +- horizon/locale/pa_IN/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pl_PL/LC_MESSAGES/django.po | 6 +- horizon/locale/pl_PL/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/pt/LC_MESSAGES/django.po | 6 +- horizon/locale/pt_BR/LC_MESSAGES/django.po | 62 +- horizon/locale/pt_BR/LC_MESSAGES/djangojs.po | 86 +- horizon/locale/ru/LC_MESSAGES/django.po | 6 +- horizon/locale/ru/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/sl_SI/LC_MESSAGES/django.po | 6 +- horizon/locale/sr/LC_MESSAGES/django.po | 6 +- horizon/locale/sr/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/te_IN/LC_MESSAGES/djangojs.po | 442 + horizon/locale/tr_TR/LC_MESSAGES/django.po | 6 +- horizon/locale/tr_TR/LC_MESSAGES/djangojs.po | 6 +- horizon/locale/zh_CN/LC_MESSAGES/django.po | 104 +- horizon/locale/zh_CN/LC_MESSAGES/djangojs.po | 104 +- horizon/locale/zh_TW/LC_MESSAGES/django.po | 29 +- horizon/locale/zh_TW/LC_MESSAGES/djangojs.po | 31 +- .../static/framework/util/filters/filters.spec.js | 2 +- .../framework/widgets/charts/pie-chart.spec.js | 2 +- .../widgets/metadata/tree/metadata-tree.html | 2 +- .../widgets/metadata/tree/tree.service.js | 19 +- .../framework/widgets/metadata/tree/tree.spec.js | 3 +- .../framework/widgets/modal/simple-modal.html | 2 +- horizon/static/horizon/js/horizon.forms.js | 28 +- horizon/test/webdriver.py | 82 +- horizon/themes.py | 18 +- horizon/utils/babel_extract_angular.py | 31 +- openstack_dashboard/api/rest/swift.py | 7 +- openstack_dashboard/api/swift.py | 7 +- .../dashboards/project/networks/workflows.py | 4 +- .../dashboards/project/stacks/forms.py | 3 + .../containers/containers-model.service.spec.js | 14 +- .../project/containers/create-container-modal.html | 4 +- .../project/containers/create-folder-modal.html | 17 +- .../project/containers/object-details-modal.html | 6 +- .../dashboard/project/containers/objects.html | 4 +- .../project/containers/upload-object-modal.html | 15 +- .../workflow/launch-instance/details/details.html | 8 +- .../keypair/import-keypair.controller.js | 4 +- .../keypair/import-keypair.controller.spec.js | 4 +- openstack_dashboard/karma.conf.js | 10 +- .../locale/as/LC_MESSAGES/django.po | 6 +- .../locale/bn_IN/LC_MESSAGES/django.po | 6 +- .../locale/brx/LC_MESSAGES/django.po | 6 +- .../locale/cs/LC_MESSAGES/django.po | 6 +- .../locale/cs/LC_MESSAGES/djangojs.po | 17 +- .../locale/de/LC_MESSAGES/django.po | 286 +- .../locale/de/LC_MESSAGES/djangojs.po | 72 +- openstack_dashboard/locale/django.pot | 15538 ------------------- openstack_dashboard/locale/djangojs.pot | 3095 ---- .../locale/en_AU/LC_MESSAGES/django.po | 6 +- .../locale/en_AU/LC_MESSAGES/djangojs.po | 27 +- .../locale/en_GB/LC_MESSAGES/django.po | 427 +- .../locale/en_GB/LC_MESSAGES/djangojs.po | 6 +- .../locale/es/LC_MESSAGES/django.po | 4425 +++--- .../locale/es/LC_MESSAGES/djangojs.po | 1386 +- .../locale/fr/LC_MESSAGES/django.po | 4032 ++--- .../locale/fr/LC_MESSAGES/djangojs.po | 738 +- .../locale/gu/LC_MESSAGES/django.po | 6 +- .../locale/hi/LC_MESSAGES/django.po | 6 +- .../locale/it/LC_MESSAGES/django.po | 9 +- .../locale/it/LC_MESSAGES/djangojs.po | 38 +- .../locale/ja/LC_MESSAGES/django.po | 6 +- .../locale/ja/LC_MESSAGES/djangojs.po | 27 +- .../locale/kn/LC_MESSAGES/django.po | 6 +- .../locale/ko_KR/LC_MESSAGES/django.po | 477 +- .../locale/ko_KR/LC_MESSAGES/djangojs.po | 62 +- .../locale/kok/LC_MESSAGES/django.po | 6 +- .../locale/ks/LC_MESSAGES/django.po | 6 +- .../locale/mai/LC_MESSAGES/django.po | 6 +- .../locale/mni/LC_MESSAGES/django.po | 6 +- .../locale/mr/LC_MESSAGES/django.po | 6 +- .../locale/ne/LC_MESSAGES/django.po | 6 +- .../locale/nl_NL/LC_MESSAGES/django.po | 6 +- .../locale/pa_IN/LC_MESSAGES/django.po | 6 +- .../locale/pl_PL/LC_MESSAGES/django.po | 6 +- .../locale/pl_PL/LC_MESSAGES/djangojs.po | 6 +- .../locale/pt_BR/LC_MESSAGES/django.po | 2655 ++-- .../locale/pt_BR/LC_MESSAGES/djangojs.po | 524 +- .../locale/ru/LC_MESSAGES/django.po | 6 +- .../locale/ru/LC_MESSAGES/djangojs.po | 29 +- .../locale/sr/LC_MESSAGES/django.po | 6 +- .../locale/ta/LC_MESSAGES/django.po | 6 +- .../locale/tr_TR/LC_MESSAGES/django.po | 6 +- .../locale/tr_TR/LC_MESSAGES/djangojs.po | 6 +- .../locale/ur/LC_MESSAGES/django.po | 6 +- .../locale/zh_CN/LC_MESSAGES/django.po | 31 +- .../locale/zh_CN/LC_MESSAGES/djangojs.po | 725 +- .../locale/zh_TW/LC_MESSAGES/django.po | 3353 ++-- .../locale/zh_TW/LC_MESSAGES/djangojs.po | 312 +- .../static/dashboard/scss/_variables.scss | 4 + .../static/dashboard/scss/components/_navbar.scss | 11 + .../scss/components/_transfer_tables.scss | 6 + openstack_dashboard/test/test_data/nova_data.py | 35 +- package.json | 6 +- requirements.txt | 4 +- tools/gate/integration/pre_test_hook.sh | 1 - 141 files changed, 12495 insertions(+), 29158 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a0fa350..09da781 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ pbr>=1.6 # Apache-2.0 -Babel>=1.3 # BSD +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD @@ -33 +33 @@ python-heatclient>=0.6.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,<3.0.0,>=1.6.0 # Apache-2.0

1 0

[OSSA-2016-008] Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass (CVE-2016-4911)
by morgan fainberg 03 Jun '16

03 Jun '16

============================================================================================ OSSA-2016-008: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass ============================================================================================ :Date: May 23, 2016 :CVE: CVE-2016-4911 Affects ~~~~~~~ - Keystone: ==9.0.0 Description ~~~~~~~~~~~ Lance Bragstad (Rackspace) reported a vulnerability in the Keystone Fernet Token Provider. By rescoping a token a user will receive a new token without correct audit_ids, these incorrect audit_ids will prevent the entire chain of tokens from being revoked properly. This vulnerability does not impact revoking a token by its individual audit_id. Only deployments with Keystone configured to use Fernet tokens are impacted. Patches ~~~~~~~ - https://review.openstack.org/#/c/312582/ (Mitaka) - https://review.openstack.org/#/c/311886/ (Newton) Credits ~~~~~~~ - Lance Bragstad from Rackspace (CVE-2016-4911) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1577558 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4911 Notes ~~~~~ - This fix was included in the openstack/keystone 9.0.1 (mitaka) release. -- Morgan Fainberg OpenStack Vulnerability Management Team

1 0