We are amped to announce the release of: heat 10.0.1: OpenStack Orchestration This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 10.0.1 ^^^^^^ Security Issues * Passwords generated by the OS::Heat::RandomString resource may have had less entropy than expected, depending on what is specified in the "character_class" and "character_sequence" properties. This has been corrected so that each character present in any of the specified classes or sequences now has an equal probability of appearing at each point in the generated random string. Changes in heat 10.0.0..10.0.1 ------------------------------ 8819c63 Resolve race in providing deployment data to Swift e80a6ec Generate user passwords with special characters 8437ec3 Fix entropy problems with OS::Random::String 400afb2 Fix races in conditionals tests 9f6a665 Imported Translations from Zanata 1d84de5 Updated from global requirements 160a6fc Return nested parameters for resource group. Diffstat (except docs and test files) ------------------------------------- heat/common/password_gen.py | 117 ++++++++++++++++++++ .../clients/os/keystone/heat_keystoneclient.py | 5 +- heat/engine/resource.py | 7 ++ .../resources/openstack/heat/instance_group.py | 7 ++ .../resources/openstack/heat/random_string.py | 99 ++++------------- .../resources/openstack/heat/resource_group.py | 8 ++ .../openstack/heat/wait_condition_handle.py | 5 +- heat/engine/resources/server_base.py | 3 +- heat/engine/resources/signal_responder.py | 7 +- heat/engine/resources/stack_resource.py | 18 +++ heat/engine/service.py | 31 +----- heat/engine/service_software_config.py | 50 ++++----- heat/engine/stack.py | 31 ++++++ heat/locale/ko_KR/LC_MESSAGES/heat.po | 6 +- heat/locale/pt_BR/LC_MESSAGES/heat.po | 6 +- heat/locale/zh_CN/LC_MESSAGES/heat.po | 6 +- heat/locale/zh_TW/LC_MESSAGES/heat.po | 6 +- .../functional/test_conditions.py | 6 +- .../functional/test_create_update.py | 6 +- .../functional/test_resource_group.py | 31 ++++++ .../random-string-entropy-9b8e23874cd79b8f.yaml | 9 ++ requirements.txt | 2 +- 29 files changed, 519 insertions(+), 198 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c853500..3ab5b2b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42 +42 @@ python-manilaclient>=1.16.0 # Apache-2.0 -python-mistralclient>=3.1.0 # Apache-2.0 +python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0