[openstack-announce] [new][cinder] cinder 7.0.3 release (liberty)

no-reply at openstack.org no-reply at openstack.org
Tue Nov 15 22:40:42 UTC 2016


We are chuffed to announce the release of:

cinder 7.0.3: OpenStack Block Storage

This release is part of the liberty stable release series.

Download the package from:

    https://tarballs.openstack.org/cinder/

For more details, please see below.

7.0.3
^^^^^

Security Issues

* The qemu-img tool now has resource limits applied which prevent it
  from using more than 1GB of address space or more than 2 seconds of
  CPU time. This provides protection against denial of service attacks
  from maliciously crafted or corrupted disk images.

Changes in cinder 7.0.2..7.0.3
------------------------------

4295ff0 Check oslo.concurrency supports prlimits
859ce1f Updated from global requirements
455b318 Limit memory & CPU when running qemu-img info
ca42539 Updated from global requirements
eb2fd29 always use pip constraints
399d4c7 Don't apply config fixture to auth_token.CONF
36aae43 Support https keystone CA checking in volume quotas
41cea9c Updated from global requirements
91c1f70 Updated from global requirements


Diffstat (except docs and test files)
-------------------------------------

cinder/api/contrib/quotas.py                       |  7 ++++++-
cinder/image/image_utils.py                        | 22 ++++++++++++++++++++--
cinder/quota_utils.py                              |  4 ++++
.../apply-limits-to-qemu-img-29f722a1bf4b91f8.yaml |  7 +++++++
requirements.txt                                   | 12 ++++++------
test-requirements.txt                              |  2 +-
tox.ini                                            | 14 +++++++++++++-
9 files changed, 64 insertions(+), 16 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 3fd4143..0391f60 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7 +7 @@ anyjson>=0.3.3
-Babel>=1.3
+Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD
@@ -13 +13 @@ keystonemiddleware!=2.4.0,>=2.0.0
-kombu>=3.0.7
+kombu!=4.0.0,>=3.0.7 # BSD
@@ -39 +39 @@ python-novaclient!=2.33.0,>=2.28.1
-python-keystoneclient!=1.8.0,>=1.6.0
+python-keystoneclient!=1.8.0,<3.0.0,>=1.6.0
@@ -44,2 +44,2 @@ retrying!=1.3.0,>=1.2.3 # Apache-2.0
-Routes!=2.0,!=2.1,>=1.12.3;python_version=='2.7'
-Routes!=2.0,>=1.12.3;python_version!='2.7'
+Routes!=2.0,!=2.1,!=2.3.0,>=1.12.3;python_version=='2.7' # MIT
+Routes!=2.0,!=2.3.0,>=1.12.3;python_version!='2.7' # MIT
@@ -56 +56 @@ oslo.vmware>=1.16.0 # Apache-2.0
-os-brick>=0.4.0 # Apache-2.0
+os-brick!=1.4.0,>=0.4.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index 0b37872..7fd0711 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -13 +13 @@ mox3>=0.7.0
-PyMySQL>=0.6.2 # MIT License
+PyMySQL!=0.7.7,>=0.6.2 # MIT License





More information about the OpenStack-announce mailing list