We are ecstatic to announce the release of: blazar 14.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 14.0.1 ^^^^^^ Security Issues *************** * Fixes a bug where any user could update/delete a lease from any project, provided that they had the lease ID. When using the default policy configuration, there is no way for a regular user to see lease IDs of another project. However, operators that are running the Resource Availability Calendar may have overridden this policy, and so may be vulnerable without this fix. LP#2120655 Bug Fixes ********* * Fixes functionality of host randomization feature. LP#2099927 * Fixes an issue where the amount of instances in an instance reservation could not be updated when the lease is active. LP#2138386 Changes in blazar 14.0.0..14.0.1 -------------------------------- 2397617 Fix updating amount in active instance leases 2484089 Fix owner policy enforcement c05c4fa Fix lease date f1676c7 Fix host randomization 03630d9 Update TOX_CONSTRAINTS_FILE for stable/2024.2 d2fb210 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar/plugins/instances/instance_plugin.py | 3 +- blazar/plugins/oshosts/host_plugin.py | 6 +- blazar/policy.py | 19 ++++- .../plugins/oshosts/test_physical_host_plugin.py | 6 +- .../fix-host-randomization-bcab5276ef6199e6.yaml | 5 ++ ...-owner-policy-enforcement-57a6d71c37ffec3d.yaml | 10 +++ ...-in-instance-reservations-52e6e3a413a0176f.yaml | 6 ++ tox.ini | 4 +- 11 files changed, 112 insertions(+), 51 deletions(-)