2026.2 Series Release Notes

23.0.1

Security Issues

  • Bug 2161402: Fixed websocket protocol support allowing arbitrary cross project access for any authenticated users.

23.0.0

Upgrade Notes

  • Support for Python 3.10 has been removed. Now Python 3.11 is the minimum version supported.

Security Issues

  • Bug 2161254: Fixed Requests with the EXTRA-SPEC header bypassed authentication and policy check.

  • Bug 2164987 : Fixed authentication bypass caused by an empty URL-Signature header.

  • Bug 2161254: Remove the feature of extra-specs in Zaqar as there is no implementation in drivers for a long time and it also causes security concerns.