We are gleeful to announce the release of: barbican 14.0.1: OpenStack Secure Key Management This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 14.0.0..14.0.1 ---------------------------------- 6e126c91 Fix Story 2010258 (CVE-2022-3100) a2697df1 Fix Barbican gate 69307b02 Fix remaining Secure RBAC policies dc49ebaa Fix Secure RBAC policies for Containers API 8b5c1d13 Fix Secure RBAC policies for Consumers 787b1106 Fix Secure RBAC policies for secret_metadata 5c7f5ad7 Fix Secure RBAC policies for Orders 9d8923e4 Fix Secure RBAC policies for Secret ACLs d0a36161 Fix Secure RBAC policies for Secrets f5959a8d Set versioned jobs to set microversion correctly 29e8fd05 Allow users with "creator" role to edit ACLs 2063705e Yoga-only: Remove TripleO job e8886bb7 Update TOX_CONSTRAINTS_FILE for stable/yoga 1891d52e Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 27 ++--- barbican/api/controllers/__init__.py | 11 +- barbican/common/policies/acls.py | 131 ++++++++++++++------ barbican/common/policies/base.py | 121 ++++++++++++------ barbican/common/policies/consumers.py | 182 ++++++++++++++++++---------- barbican/common/policies/containers.py | 125 +++++++++++++------ barbican/common/policies/orders.py | 65 ++++++++-- barbican/common/policies/quotas.py | 50 ++++++-- barbican/common/policies/secretmeta.py | 100 ++++++++++----- barbican/common/policies/secrets.py | 116 ++++++++++++------ barbican/common/policies/secretstores.py | 70 +++++++++-- barbican/common/policies/transportkeys.py | 50 ++++++-- tox.ini | 8 +- 16 files changed, 764 insertions(+), 327 deletions(-)