We are delighted to announce the release of: zaqar 20.1.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. 20.1.1 ^^^^^^ Security Issues * Bug 2161254 (https://bugs.launchpad.net/zaqar/+bug/2161254): Fixed Requests with the "EXTRA-SPEC" header bypassed authentication and policy check. Changes in zaqar 20.1.0..20.1.1 ------------------------------- 07b283de Do not bypass authentication for requests with EXTRA-SPEC header 9277829d stable/2025.1 only: Disable Jammy job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 ++++-- releasenotes/notes/bug-2161254-55c2748092268fb3.yaml | 6 ++++++ zaqar/transport/middleware/auth.py | 8 +++----- 3 files changed, 13 insertions(+), 7 deletions(-)