We are delighted to announce the release of:

oslo.utils 4.7.0: Oslo Utility library

This release is part of the wallaby release series.

The source is available from:

https://opendev.org/openstack/oslo.utils

Download the package from:

https://pypi.org/project/oslo.utils

Please report issues through:

https://bugs.launchpad.net/oslo.utils/+bugs

For more details, please see below.

4.7.0 ^^^^^

New Features

* A wrapper for hashlib.md5() has been added to allow OpenStack to run on systems where FIPS is enabled. Under FIPS, md5 is disabled and calls to hashlib.md5() will fail. In most cases in OpenStack, though, md5 is not used within a security context.

In https://bugs.python.org/issue9216, a proposal has been made to allow the addition of a keyword parameter usedforsecurity, which can be used to designate non-security context uses. In this case, md5() operations would be permitted. This feature is expected to be delivered in python 3.9.

Downstream python already supports this option, though. This wrapper simply allows for this option to be supported where the underlying python version supports it.

Changes in oslo.utils 4.6.0..4.7.0 ----------------------------------

603fa50 Add function to encapsule md5 for FIPS systems 36f0de6 Add Python3 wallaby unit tests 99efd43 Update master for stable/victoria 71122a0 Adding pre-commit f2723a5 Add Python3 victoria unit tests

Diffstat (except docs and test files) -------------------------------------

.pre-commit-config.yaml | 35 ++++++++++++++++ .zuul.yaml | 2 +- oslo_utils/secretutils.py | 21 ++++++++++ .../notes/add-md5-wrapper-7bf81c2464a7a224.yaml | 16 ++++++++ releasenotes/source/conf.py | 2 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 +++ test-requirements.txt | 2 + tox.ini | 2 +- 12 files changed, 136 insertions(+), 7 deletions(-)

Requirements updates --------------------

diff --git a/test-requirements.txt b/test-requirements.txt index 349cab6..f225ea4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24,0 +25,2 @@ bandit>=1.6.0,<1.7.0 # Apache-2.0 + +pre-commit>=2.6.0 # MIT