diff --git a/AUTHORS b/AUTHORS index ef171fb7..a4918469 100644 --- a/AUTHORS +++ b/AUTHORS @@ -11,3 +11,18 @@ Rainer Toebbicke Scott Simpson Tom Fifield Victor Rodionov +Darryl Tam +Fabien Boucher +Jeremy Stanley +Koert van der Veer +Kota Tsuyuzaki +MORITA Kazutaka +Masaki Tsukuda +Naoto Nishizono +Nassim Babaci +Pete Zaitcev +Tim Burke +Vil Surkin +Wyllys Ingersoll +charz +Виль Суркин diff --git a/CHANGELOG b/CHANGELOG index a3089639..fbfed3a2 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,34 @@ +Swift3 (1.9) + + * Date Header fixes (closes CVE-2015-8466) + + - Older versions of swift3 allow requests without any date headers, + making them vulnerable to replay attacks. Now swift3 forces incomming + requests to have either valid Date header or valid x-amz-date header. + + * Response fixes + + - Now swift3 returns correct (same syntax with actual S3) response + in following case: + + -- content-type in ErrorResponse + -- Etag in BucketListing + + * Allow to delete segments, when the DELETE request is for slo + + - If the incomming DELETE request is to slo object, swift3 now attempt + to query multipart-manifest=delete to delete whole segments in the + manifest. This will achieve to clean up part objects for multipart + upload. + + * Accept chunked transfer-encodings + + * Update supported version of Keystone + + * Move to new namespace (from stackforge to openstack) + + * Other minor bug fixes and small improvements + Swift3 (1.8) * multi object deletion support diff --git a/setup.cfg b/setup.cfg index bd972396..46aff45b 100644 --- a/setup.cfg +++ b/setup.cfg @@ -1,6 +1,6 @@ [metadata] name = swift3 -version = 1.8.0 +version = 1.9.0 summary = Swift AmazonS3 API emulation Middleware description-file = README.md