We contentedly announce the release of: heat 9.0.5: OpenStack Orchestration This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 9.0.5 ^^^^^ Security Issues * Passwords generated by the OS::Heat::RandomString resource may have had less entropy than expected, depending on what is specified in the "character_class" and "character_sequence" properties. This has been corrected so that each character present in any of the specified classes or sequences now has an equal probability of appearing at each point in the generated random string. Changes in heat 9.0.4..9.0.5 ---------------------------- 258d22c Reset resource replaced_by field for rollback 1239765 Ignore RESOLVE translation errors when translating before_props b92f421 Ignore NotFound error in prepare_for_replace 7daa3bd Ignore errors in purging events 6526311 Update test image c496882 Fixing unicode issue when to_dict is called on py2.7 env b84a741 Generate user passwords with special characters a08893d Fix entropy problems with OS::Random::String Diffstat (except docs and test files) ------------------------------------- heat/common/context.py | 4 +- heat/common/password_gen.py | 117 ++++++++++++++++++++ heat/db/sqlalchemy/api.py | 57 +++++----- .../clients/os/keystone/heat_keystoneclient.py | 5 +- heat/engine/properties.py | 6 +- heat/engine/resource.py | 9 +- .../resources/openstack/heat/random_string.py | 99 ++++------------- .../openstack/heat/wait_condition_handle.py | 5 +- heat/engine/resources/openstack/neutron/port.py | 12 +- heat/engine/resources/server_base.py | 3 +- heat/engine/resources/signal_responder.py | 7 +- heat/engine/translation.py | 34 ++++-- .../update_user_replace_rollback_update.py | 54 +++++++++ .../random-string-entropy-9b8e23874cd79b8f.yaml | 9 ++ 23 files changed, 513 insertions(+), 156 deletions(-)