February 2023 - Release-announce - lists.openstack.org

swift 2.28.1 (xena)
by no-reply＠openstack.org 02 Feb '23

02 Feb '23

We are satisfied to announce the release of: swift 2.28.1: OpenStack Object Storage This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.28.1 ^^^^^^ Security Issues *************** * Fixed a security issue in how "s3api" handles XML parsing that allowed authenticated S3 clients to read arbitrary files from proxy servers. Refer to CVE-2022-47950 for more information. * Constant-time string comparisons are now used when checking S3 API signatures. Bug Fixes ********* * Fixed a path-rewriting bug introduced in Python 3.7.14, 3.8.14, 3.9.14, and 3.10.6 that could cause some "domain_remap" requests to be routed to the wrong object. * Improved compatibility with certain FIPS-mode-enabled systems. * Ensure that non-durable data and .meta files are purged from handoffs after syncing. Changes in swift 2.28.0..2.28.1 ------------------------------- b1916f81e Authors/ChangeLog for 2.28.1 7d13d1a82 s3api: Prevent XXE injections 29f10ecff Fix docs build 8aface90d [stable-only] Pin tox<4 for stable branches (<=stable/zed) testing ac05ac89b CI: pin tox at the project level a196790cc Inline parse_request from cpython 75aae4c1b Extract SwiftHttpProtocol to its own module 9a7562d60 playbooks: replace ansible_ssh_user with ansible_user d05ddb036 py2constraints: pin PasteDeploy version b8b3f044f CI: Add nslookup_target to FIPS jobs c6c51be17 Stop partial()ing hashlib.new 880422583 tests: Fix swiftclient/requests log level & Ignore py36 deprecation warnings 0fa745c7f s3api: Use constant-time string comparisons in check_signature a1c33839e CI: remove swift-tox-func-encryption-py36-centos-8 job 01955bc1b Add FIPS CI jobs 71b491b05 Fix arm64 jobs on stable/xena 68bd795a6 Fix cname_lookup test 8c41bf79b reconstructor: remove non-durable files on handoffs 7520aada3 Update TOX_CONSTRAINTS_FILE for stable/xena 29c314ea7 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 112 ++++-- AUTHORS | 3 + CHANGELOG | 20 +- py2-constraints.txt | 1 + .../notes/2_28_1_release-f71f8c034dd44ce7.yaml | 24 ++ swift/__init__.py | 6 +- swift/common/http_protocol.py | 320 ++++++++++++++++ swift/common/middleware/s3api/etree.py | 2 +- swift/common/middleware/s3api/s3request.py | 6 +- swift/common/middleware/tempurl.py | 3 +- swift/common/wsgi.py | 234 +----------- swift/obj/diskfile.py | 14 +- test/__init__.py | 4 + test/functional/__init__.py | 3 +- test/functional/s3api/test_xxe_injection.py | 233 ++++++++++++ test/probe/test_sharder.py | 9 +- .../common/middleware/s3api/test_multi_delete.py | 40 ++ .../unit/common/middleware/s3api/test_s3request.py | 11 + test/unit/common/middleware/test_cname_lookup.py | 7 +- test/unit/common/test_http_protocol.py | 412 +++++++++++++++++++++ test/unit/common/test_wsgi.py | 335 +---------------- test/unit/helpers.py | 2 +- test/unit/obj/test_reconstructor.py | 6 +- test/unit/proxy/test_server.py | 3 +- tools/playbooks/common/install_dependencies.yaml | 20 +- tools/playbooks/dsvm/pre.yaml | 8 +- tools/playbooks/multinode_setup/common_config.yaml | 4 +- tools/playbooks/multinode_setup/make_rings.yaml | 8 +- tools/playbooks/multinode_setup/pre.yaml | 8 +- tools/playbooks/multinode_setup/run.yaml | 2 +- .../templates/make_multinode_rings.j2 | 2 +- .../saio_single_node_setup/setup_saio.yaml | 14 +- tox.ini | 7 +- 34 files changed, 1240 insertions(+), 644 deletions(-)

1 0

openstack-ansible 26.0.1 (zed)
by no-reply＠openstack.org 01 Feb '23

01 Feb '23

We high-spiritedly announce the release of: openstack-ansible 26.0.1: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.0.1 ^^^^^^ Security Issues *************** * This release includes SHA bump for Cinder, Nova and Glance that covers OSSA-2023-002 vulnarability (CVE-2022-47951). Bug Fixes ********* * Fixed issue where neutron-metadata-agent and neutron-dhcp-agent were started on network_hosts for OVN scenario along with neutron- ovn- metadata-agent. These services will be disabled and masked for existing environments. Manual clean-up of systemd services and correpsonsive neutron agents is still needed. New deployments won't have these services deployed from the beginning. Changes in openstack-ansible 26.0.0..26.0.1 ------------------------------------------- f54fc43f0 Bump OSA for stable/zed to cover CVE-2022-47951 b7d67b5bb Fix bump of github repos cd0405c94 Bump OpenStack-Ansible Zed 631fd5951 Add Glance tempest plugin repo to testing SHA pins list 2dc11a39c Skip haproxy with setup-infrastructure for upgrades dfb0c02f4 Block unauthenticated Ironic API endpoints from untrusted networks 0b7b681d7 [doc] Update repositiories for mirroring 26adeef20 Correct series names for documentation f6d0a3a1c Sync ZFS pool names 3ac6b6217 Define name for all collections in a-r-r f03be8368 Prevent bootstrap failure when all roles/collections are overriden e9c2f7dd1 Add gate_log_requirements function 1ac606dcc [doc] Fix document on dymanic_inventory tox usage 71f5f948c Unset OSA-defined variables for bootstrap 52b99e009 Update tox.ini abac5e82c Update TOX_CONSTRAINTS_FILE for stable/zed e3fd4d137 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 38 ++++-- ansible-role-requirements.yml | 138 ++++++++++----------- deploy-guide/source/conf.py | 4 +- .../reference/inventory/generate-inventory.rst | 4 +- inventory/group_vars/haproxy/haproxy.yml | 7 ++ playbooks/defaults/repo_packages/gnocchi.yml | 4 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 52 ++++---- .../defaults/repo_packages/openstack_testing.yml | 6 +- .../notes/ossa-2023-002-0ee5aa141d4ee69d.yaml | 5 + .../ovn_dhcp_metadata_agents-851b42a6923c811f.yaml | 10 ++ scripts/bootstrap-ansible.sh | 4 + scripts/get-ansible-collection-requirements.yml | 7 +- scripts/get-ansible-role-requirements.yml | 2 +- scripts/run-upgrade.sh | 3 +- scripts/scripts-library.sh | 14 +++ .../bootstrap-host/tasks/prepare_data_disk.yml | 8 +- tox.ini | 6 +- 23 files changed, 220 insertions(+), 154 deletions(-)

1 0

python-openstackclient 5.6.2 (xena)
by no-reply＠openstack.org 01 Feb '23

01 Feb '23

We high-spiritedly announce the release of: python-openstackclient 5.6.2: OpenStack Command-line Client This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. Changes in python-openstackclient 5.6.1..5.6.2 ---------------------------------------------- e6da07b9 [stable-only] Add munch in requirements.txt Diffstat (except docs and test files) ------------------------------------- requirements.txt | 1 + 1 file changed, 1 insertion(+) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d3155a25..21d19ecd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ iso8601>=0.1.11 # MIT +munch>=2.1.0 # MIT

1 0

oslo.messaging 14.2.0 (antelope)
by no-reply＠openstack.org 01 Feb '23

01 Feb '23

We exuberantly announce the release of: oslo.messaging 14.2.0: Oslo Messaging API This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.2.0 ^^^^^^ New Features * The "get_rpc_transport", "get_rpc_server" and "get_rpc_client" helper functions now have support for overriding the class that is instantiated. Changes in oslo.messaging 14.1.0..14.2.0 ---------------------------------------- 687dea2e Support overriding class for get_rpc_* helper functions 75053169 tox cleanups Diffstat (except docs and test files) ------------------------------------- oslo_messaging/rpc/client.py | 8 ++- oslo_messaging/rpc/server.py | 7 +- oslo_messaging/rpc/transport.py | 7 +- .../get-rpc-helpers-cls-8911826ac08aef2a.yaml | 5 ++ tools/test-setup.sh | 14 ++-- tox.ini | 82 ++++++++++++---------- 6 files changed, 73 insertions(+), 50 deletions(-)

1 0