We are satisfied to announce the release of: zaqar 21.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 21.0.1 ^^^^^^ Security Issues * Bug 2161254 (https://bugs.launchpad.net/zaqar/+bug/2161254): Fixed Requests with the "EXTRA-SPEC" header bypassed authentication and policy check. Changes in zaqar 21.0.0..21.0.1 ------------------------------- 46ff729c Do not bypass authentication for requests with EXTRA-SPEC header 466c77a6 Fix outdated version list api example 84a628eb Update TOX_CONSTRAINTS_FILE for stable/2025.2 c96cc1f4 Update .gitreview for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/samples/versions-list-response.json | 21 ++------------------- .../notes/bug-2161254-55c2748092268fb3.yaml | 6 ++++++ tox.ini | 8 ++++---- zaqar/transport/middleware/auth.py | 8 +++----- 5 files changed, 16 insertions(+), 28 deletions(-)