~racb/ubuntu/oneiric/cobbler/858878

~racb/ubuntu/oneiric/cobbler/858878_security » Changes from revision 58

From Revision 58 to 39

Rev	Summary	Authors	Tags	Date
58	debian/cobbler-common.install: do not install /etc/cobbler/u... debian/cobbler-common.install: do not install /etc/cobbler/users.digest. This is created with the correct permissions by cobbler.postinst. Based on fix to precise.	Robie Basak		12 years ago
57	debian/cobbler.preinst: set /etc/cobbler/users.digest to 600... debian/cobbler.preinst: set /etc/cobbler/users.digest to 600 if upgrading from a vulnerable version. Based on fix in precise.	Robie Basak		12 years ago
56	Adjust changelog entries to match process template Adjust changelog entries to match process template	Robie Basak		12 years ago
55	* SECURITY UPDATE: webui_sessions uses insecure permissions ... * SECURITY UPDATE: webui_sessions uses insecure permissions (LP: #863755) - debian/cobbler.postinst: fix permissions on webui_{sessions,cache} to 0700	Robie Basak		12 years ago
54	* SECURITY UPDATE: users.digest file is world readable (LP: ... * SECURITY UPDATE: users.digest file is world readable (LP: #858860) - debian/cobbler.postinst: create /etc/cobbler/users.digest as 600	Robie Basak		12 years ago
53	* SECURITY UPDATE: arbitrary code execution via web interfac... * SECURITY UPDATE: arbitrary code execution via web interface (LP: #858883) - debian/patches/60_yaml_safe_load.patch: use yaml.safe_load instead of yaml.load (taken from upstream).	Robie Basak		12 years ago
52	* SECURITY UPDATE: CSRF vulnerability in cobbler-web (LP: #8... * SECURITY UPDATE: CSRF vulnerability in cobbler-web (LP: #858878) - debian/patches/59_add_csrf_protection.patch: use Django's built-in CSRF protection (taken from upstream).	Robie Basak		12 years ago
51	* SECURITY UPDATE: arbitrary code execution via PYTHON_EGG_C... * SECURITY UPDATE: arbitrary code execution via PYTHON_EGG_CACHE in insecure location (LP: #858875) - debian/patches/58_fix_egg_cache.patch: move PYTHON_EGG_CACHE to /var/lib/cobbler/webui_cache (copied from fix to precise).	Robie Basak		12 years ago
50	* SRU (LP: #899283): * SRU (LP: #899283): - debian/patches/47_ubuntu_add_oneiric_codename.patch: Updated to add 'precise' as a importable/supported release.	Andres Rodriguez	2.1.0+git20110602-0ubuntu26.1	12 years ago
49	releasing version 2.1.0+git20110602-0ubuntu26 releasing version 2.1.0+git20110602-0ubuntu26	Luke Yelavich	2.1.0+git20110602-0ubuntu26	12 years ago
48	Merge branch lp:~gandelman-a/ubuntu/oneiric/cobbler/lp850892 Merge branch lp:~gandelman-a/ubuntu/oneiric/cobbler/lp850892	Luke Yelavich		12 years ago
47	debian/cobbler-common.install: Install missing pxeprofile_ar... debian/cobbler-common.install: Install missing pxeprofile_arm.template and pxesystem_arm.template (LP: #844982).	Andres Rodriguez	2.1.0+git20110602-0ubuntu25	12 years ago
46	debian/cobbler-web.postinst: Correctly handle creation/valid... debian/cobbler-web.postinst: Correctly handle creation/validation of links for the Ubuntu font for cobbler-web. (LP: #840188)	Andres Rodriguez	2.1.0+git20110602-0ubuntu24	12 years ago
45	debian/patches/57_ubuntu_dnsmasq_domain.patch: Add commented... debian/patches/57_ubuntu_dnsmasq_domain.patch: Add commented 'domain' field on dnsmasq template to be later used by orchestra. (LP: #834172)	Andres Rodriguez	2.1.0+git20110602-0ubuntu23	12 years ago
44	cobbler-web: Localize use of Ubuntu fonts, add ttf-ubuntu-fo... cobbler-web: Localize use of Ubuntu fonts, add ttf-ubuntu-font-family as Depends. (LP #834868)	Adam Gandelman	2.1.0+git20110602-0ubuntu22	12 years ago
43	debian/patches/52_ubuntu_default_config.patch: Update. Add '... debian/patches/52_ubuntu_default_config.patch: Update. Add 'orchestra' to cheetah_import_whitelist	Andres Rodriguez	2.1.0+git20110602-0ubuntu21	12 years ago
42	* debian/patches: * debian/patches: - 49_ubuntu_add_arm_arch_support.patch: Updated to allow import of ARM arch. (LP: #827674) - 56_ubuntu_arm_generate_pxe_files.patch: Added. Add templates and generate files for PXE Menu creation for profile/systems. (LP: #827681) Additionally make sure hostname is set correctly. * Add preseed for ARM architectures. - debian/ubuntu-server-arm.seed: Add - debian/cobbler.install: Install preseed.	Andres Rodriguez	2.1.0+git20110602-0ubuntu20	12 years ago
41	* debian/cobbler-ubuntu-import: * debian/cobbler-ubuntu-import: - move the loop_mount logic over from orchestra-import-isos (which now uses cobbler-ubuntu-import)	Dustin Kirkland	2.1.0+git20110602-0ubuntu19	12 years ago
40	* debian/patches/55_ubuntu_branding.patch, debian/patches/se... * debian/patches/55_ubuntu_branding.patch, debian/patches/series, web/content/logo-ubuntu.png: - skin the web interface with Ubuntu colors/logo - fix install location, move png to right location	Dustin Kirkland	2.1.0+git20110602-0ubuntu18	12 years ago
39	Fix description of cobbler-web package. Fix description of cobbler-web package.	Loïc Minier	2.1.0+git20110602-0ubuntu17	12 years ago

Older »