~racb/ubuntu/oneiric/cobbler/858878_security

cobbler (2.1.0+git20110602-0ubuntu26.2) oneiric-security; urgency=low

  * SECURITY UPDATE: arbitrary code execution via PYTHON_EGG_CACHE in insecure
    location (LP: #858875)
    - debian/patches/58_fix_egg_cache.patch: move PYTHON_EGG_CACHE to
      /var/lib/cobbler/webui_cache. Based on fix in precise.
  * SECURITY UPDATE: CSRF vulnerability in cobbler-web (LP: #858878)
    - debian/patches/59_add_csrf_protection.patch: use Django's built-in
      CSRF protection. Based on upstream patch.
  * SECURITY UPDATE: arbitrary code execution via web interface (LP: #858883)
    - debian/patches/60_yaml_safe_load.patch: use yaml.safe_load instead of
      yaml.load. Based on upstream patch.
  * SECURITY UPDATE: users.digest file is world readable (LP: #858860)
    - debian/cobbler.postinst: create /etc/cobbler/users.digest as 600. Based
      on fix in precise.
    - debian/cobbler.preinst: set /etc/cobbler/users.digest to 600 if upgrading
      from a vulnerable version. Based on fix in precise.
    - debian/cobbler-common.install: do not install /etc/cobbler/users.digest.
      This is created with the correct permissions by cobbler.postinst. Based
      on fix to precise.
  * SECURITY UPDATE: webui_sessions uses insecure permissions (LP: #863755)
    - debian/cobbler-web.postinst: fix permissions on webui_{sessions,cache} to
      0700. Based on fix in precise.

 -- Robie Basak <robie.basak@ubuntu.com>  Thu, 05 Jan 2012 08:08:40 +0000

cobbler (2.1.0+git20110602-0ubuntu26.1) oneiric-proposed; urgency=low

  * SRU (LP: #899283):
    - debian/patches/47_ubuntu_add_oneiric_codename.patch: Updated to add
      'precise' as a importable/supported release.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Fri, 02 Dec 2011 12:31:21 -0500

cobbler (2.1.0+git20110602-0ubuntu26) oneiric; urgency=low

  * debian/cobbler-ubuntu-import: Add --check-update and --remove
    functionality.  This should help orchestra-import-isos keep local
    ISO caches up-to-date. (LP: #850892)

 -- Adam Gandelman <adamg@canonical.com>  Thu, 15 Sep 2011 16:36:39 -0700

cobbler (2.1.0+git20110602-0ubuntu25) oneiric; urgency=low

  * debian/cobbler-common.install: Install missing pxeprofile_arm.template
    and pxesystem_arm.template (LP: #844982).

 -- Andres Rodriguez <andreserl@ubuntu.com>  Thu, 08 Sep 2011 13:01:55 -0400

cobbler (2.1.0+git20110602-0ubuntu24) oneiric; urgency=low

  * debian/cobbler-web.postinst: Correctly handle creation/validation of
    links for the Ubuntu font for cobbler-web. (LP: #840188)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 06 Sep 2011 14:11:49 -0400

cobbler (2.1.0+git20110602-0ubuntu23) oneiric; urgency=low

  * debian/patches/57_ubuntu_dnsmasq_domain.patch: Add commented 'domain'
    field on dnsmasq template to be later used by orchestra. (LP: #834172)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Thu, 01 Sep 2011 20:08:17 -0400

cobbler (2.1.0+git20110602-0ubuntu22) oneiric; urgency=low

  * cobbler-web: Localize use of Ubuntu fonts, add ttf-ubuntu-font-family
    as Depends. (LP #834868)

 -- Adam Gandelman <adamg@canonical.com>  Fri, 26 Aug 2011 12:58:21 -0700

cobbler (2.1.0+git20110602-0ubuntu21) oneiric; urgency=low

  * debian/patches/52_ubuntu_default_config.patch: Update. Add 'orchestra'
    to cheetah_import_whitelist

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 23 Aug 2011 17:35:45 -0400

cobbler (2.1.0+git20110602-0ubuntu20) oneiric; urgency=low

  * debian/patches:
    - 49_ubuntu_add_arm_arch_support.patch: Updated to allow import of ARM
      arch. (LP: #827674)
    - 56_ubuntu_arm_generate_pxe_files.patch: Added. Add templates and
      generate files for PXE Menu creation for profile/systems. (LP: #827681)
      Additionally make sure hostname is set correctly.
  * Add preseed for ARM architectures.
    - debian/ubuntu-server-arm.seed: Add
    - debian/cobbler.install: Install preseed.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Wed, 17 Aug 2011 12:22:53 -0400

cobbler (2.1.0+git20110602-0ubuntu19) oneiric; urgency=low

  * debian/cobbler-ubuntu-import:
    - move the loop_mount logic over from orchestra-import-isos (which now
      uses cobbler-ubuntu-import)

 -- Dustin Kirkland <kirkland@ubuntu.com>  Thu, 11 Aug 2011 13:02:11 -0500

cobbler (2.1.0+git20110602-0ubuntu18) oneiric; urgency=low

  * debian/patches/55_ubuntu_branding.patch, debian/patches/series,
    web/content/logo-ubuntu.png:
    - skin the web interface with Ubuntu colors/logo
    - fix install location, move png to right location

 -- Dustin Kirkland <kirkland@ubuntu.com>  Wed, 10 Aug 2011 16:12:18 -0500

cobbler (2.1.0+git20110602-0ubuntu17) oneiric; urgency=low

  * Fix description of cobbler-web package.

 -- Loïc Minier <loic.minier@ubuntu.com>  Thu, 28 Jul 2011 11:55:50 +0200

cobbler (2.1.0+git20110602-0ubuntu16) oneiric; urgency=low

  * debian/cobbler.postinst: Drop. Causes purge to fail (LP: #805901)
  * debian/control: Depend on libapache2-mod-wsgi for cobbler-web (LP: #790038)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 19 Jul 2011 18:13:59 -0400

cobbler (2.1.0+git20110602-0ubuntu15) oneiric; urgency=low

  * debian/cobbler-ubuntu-import: add tool for importing Ubuntu releases

 -- Scott Moser <smoser@ubuntu.com>  Tue, 12 Jul 2011 14:27:34 -0400

cobbler (2.1.0+git20110602-0ubuntu14) oneiric; urgency=low

  * debian/patches/54_koan_fix_tree_when_ksmeta.patch: Ensure ks_meta args
    are not added to tree when obtaining it.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 12 Jul 2011 12:10:40 -0400

cobbler (2.1.0+git20110602-0ubuntu13) oneiric; urgency=low

  * debian/patches:
    - 52_ubuntu_default_config.patch: Rename/update patch created by quilt
      for changes to config/settings.
    - 53_sample_preseed_kopts_postinst.patch: Add post inst kernel options
      to sample preseed. (LP: #760019)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 05 Jul 2011 12:45:32 -0400

cobbler (2.1.0+git20110602-0ubuntu12) oneiric; urgency=low

  * config/settings:
    - default kernel options on install to en_US and priority=critical,
      to prevent interactive remote installs
    - default virt settings to kvm-friendly virbr0 and qemu
    - default power management to ether_wake
    - default preseed to an Ubuntu preseed
    - default to pxe boot just once to prevent boot loops
  * debian/cobbler.install, debian/cobbler.links,
    debian/ubuntu-server.preseed:
    - create and install an ubuntu-server.preseeed

 -- Dustin Kirkland <kirkland@ubuntu.com>  Wed, 29 Jun 2011 12:07:23 +0000

cobbler (2.1.0+git20110602-0ubuntu11) oneiric; urgency=low

  * debian/patches/51_koan_grub2_instead_of_grubby.patch: Use grub2 for koan's
    '--replace-self' option instead of grubby. (LP: #766229)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Tue, 28 Jun 2011 17:02:53 -0400

cobbler (2.1.0+git20110602-0ubuntu10) oneiric; urgency=low

  * debian/patches/50_fix_cobbler_timezone.patch: Dont hardcode timezone
    in the web interface. 

 -- Chuck Short <zulcss@ubuntu.com>  Tue, 28 Jun 2011 11:55:14 +0100

cobbler (2.1.0+git20110602-0ubuntu9) oneiric; urgency=low

  * debian/patches/49_ubuntu_add_arm_arch_support.patch: Add arm as a valid 
    architecture. 

 -- Chuck Short <zulcss@ubuntu.com>  Mon, 27 Jun 2011 07:30:23 -0400

cobbler (2.1.0+git20110602-0ubuntu8) oneiric; urgency=low

  * debian/control: Recommends on fence-agents.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Mon, 20 Jun 2011 11:09:33 -0400

cobbler (2.1.0+git20110602-0ubuntu7) oneiric; urgency=low

  * debian/patches:
    - 47_ubuntu_add_oneiric_codename.patch: Add oneiric codename to
      not fail on Oneiric imports.
    - 48_ubuntu_mini_iso_autodetect.patch: Obtain os_version/arch when
      importing mini ISO from info file (.disk/mini-info).

 -- Andres Rodriguez <andreserl@ubuntu.com>  Fri, 17 Jun 2011 18:12:54 -0400

cobbler (2.1.0+git20110602-0ubuntu6) oneiric; urgency=low

  * debian/patches/45_add_gpxe_support.patch: Added missing ')', fixing
    installability.

 -- Dave Walker (Daviey) <DaveWalker@ubuntu.com>  Fri, 10 Jun 2011 18:22:08 +0100

cobbler (2.1.0+git20110602-0ubuntu4) oneiric; urgency=low

  * debian/patches/45_add_gpxe_support.patch: Add gpxe booting support
    to cobbler. Apart of the server-o-cobbler-next-steps specification.
  * debian/patches/46_valid_hostname_for_dns.patch: "_" is not a valid
    character for a hostname use "-" instead. (LP: #784420) 

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 09 Jun 2011 09:40:58 -0400

cobbler (2.1.0+git20110602-0ubuntu3) oneiric; urgency=low

  * debian/patches/42_fix_repomirror_create_sync.patch: Improve method to
    obtain Ubuntu mirror to use if python-apt installed.
  * debian/cobbler.postinst: Really fix setting of 'server'. Move the logic
    to obtain IP to debian/cobbler.config and set it default if available.
  * Un-apply all patches and remove .pc. IMO branches should not reflect patches
    applied as they generate huge diff's when updating or working with them.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Wed, 08 Jun 2011 17:21:45 -0400

cobbler (2.1.0+git20110602-0ubuntu2) oneiric; urgency=low

  * debian/cobbler.templates: Re-introduce i18n support and refresh template.
  * NOTE: The Following patches were NOT really dropped and SHOULD not be.
    - debian/patches/41_update_tree_path_with_arch.patch
    - debian/patches/42_fix_repomirror_create_sync.patch

 -- Andres Rodriguez <andreserl@ubuntu.com>  Fri, 03 Jun 2011 15:20:26 -0400

cobbler (2.1.0+git20110602-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New upstream version:
    - Dropped the following patches, already accepted upstream:
      + debian/patches/31_add_ubuntu_koan_utils_support.patch
      + debian/patches/32_fix_koan_import_yum.patch
      + debian/patches/36_tainted_file_path.patch
      + debian/patches/37_koan_install_tree.patch
      + debian/patches/38_koan_qcreate_ubuntu_support.patch
      + debian/patches/41_update_tree_path_with_arch.patch
      + debian/patches/42_fix_repomirror_create_sync.patch
      + debian/patches/42_fix_repomirror_create_sync.patch

  [Andres Rodriguez]
  * debian/cobbler.{templates, config, postinst}: Add debconf question to
    set next_server and server config options.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 03 Jun 2011 09:25:37 -0400

cobbler (2.1.0-0ubuntu11) oneiric; urgency=low

  * Fixed Lintian error/warnings. (LP: #705436)
    - debian/{po/,control,cobbler.templates}: Added I18N support to debconf 
      template file.
    - debian/control: 
      + Bumped Standards Version to 3.9.2 (no changes needed)
      + Changed python-koan binary package to section python.
    - debian/copyright: 
      + Updated Free Software Foundation (FSF) postal address.
      + Removed reference to base-files BSD licence.
    - debian/patches/44_cobbler_manpage_syntax_fix.patch: Fix manpage to not
      generate errors with pod2man.
    - debian/{rules,cobbler.install}: Drop file extension to /usr/sbin/tftpd.py
    - debian/cobbler.postrm: Set -e on shebang.
    - debian/cobbler-web.lintian-overrides: Overide warning of scripts which 
      are purely provided as a web resource, never executed locally.
    - debian/cobbler.manpages, debian/manpages/{cobbler-ext-nodes.1,cobblerd.1,
      tftpd.1}: Initial manpages created.
  * debian/control: Added Depends on python-twisted which is required by
    cobblers tftpd.

 -- Dave Walker (Daviey) <DaveWalker@ubuntu.com>  Fri, 03 Jun 2011 13:09:09 +0100

cobbler (2.1.0-0ubuntu10) oneiric; urgency=low

  * debian/cobbler.postinst:
    - fix minor error in the grep from the last upload, fixing cobbler
      settings
  * debian/control:
    - drop cman from suggests;  fence-agents will land in the archive very
      soon and should be added as a recommends

 -- Dustin Kirkland <kirkland@ubuntu.com>  Thu, 02 Jun 2011 17:15:02 -0400

cobbler (2.1.0-0ubuntu9) oneiric; urgency=low

  * debian/cobbler.postinst:
    - set server and next_server in the initial cobbler settings, so as
      to make it more useful out of the box
  * debian/control:
    - fix upstream URL, LP: #791101

 -- Dustin Kirkland <kirkland@ubuntu.com>  Tue, 31 May 2011 18:48:43 -0500

cobbler (2.1.0-0ubuntu8) oneiric; urgency=low

  * debian/patches:
    - 41_update_tree_path_with_arch.patch: Update mirror_name to correctly
      reflect path tree patch when specifying arch on import. (LP: #772012)
    - 42_fix_repomirror_create_sync.patch: Fix the creation of a disabled
      repo mirror; enables apt as a repo. (LP: #765224)
    - 43_fix_reposync_env_variable.patch: Fix reposync HOME env variable for
      debmirror by hardcoding to /var/lib/cobbler. (LP: #775946)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Mon, 02 May 2011 18:26:03 -0400

cobbler (2.1.0-0ubuntu7) natty; urgency=low

  * Fixed management of bind9 (LP: #764391):
    - debian/patches/40_ubuntu_bind9_management.patch:
      - Manage bind9 instead of named daemon.
      - Generate configuration in /etc/bind.
      - Use default bind9 configuration as much as possible.
    - debian/control: Added Suggests: bind9 to cobbler.

 -- James Page <james.page@canonical.com>  Mon, 18 Apr 2011 11:15:59 +0100

cobbler (2.1.0-0ubuntu6) natty; urgency=low

  * Fix DocumentRoot conflict with default vhost (LP: #760012)
    - debian/patches/39_cw_remove_vhost.patch: Remove VirtualHost definition. 

 -- James Page <james.page@canonical.com>  Fri, 15 Apr 2011 13:35:20 +0100

cobbler (2.1.0-0ubuntu5) natty; urgency=low

  * Fix koan launch of Ubuntu images in KVM (LP: #751959).
    - debian/patches/37_koan_install_tree.patch: Obtain install tree for
      Ubuntu/Debian differently as we use preseeds rather than kickstarts.
    - debian/patches/38_koan_qcreate_ubuntu_support.patch: Add ubuntu support
      when creating images on KVM. Used for communication with virtinst.
  * debian/patches/debian-changes-2.1.0-0ubuntu4: Dropped automatically
    created quilt patch.

 -- Andres Rodriguez <andreserl@ubuntu.com>  Thu, 07 Apr 2011 13:25:13 -0400

cobbler (2.1.0-0ubuntu4) natty; urgency=low

  * debian/patches/36_tainted_file_path.patch: cherry-pick fix
    to tainted file path errors, LP: #750402

 -- Dustin Kirkland <kirkland@ubuntu.com>  Mon, 04 Apr 2011 13:14:13 -0500

cobbler (2.1.0-0ubuntu3) natty; urgency=low

  [ Andres Rodriguez ]
  * Really create/install python-koan binary package, LP: #731616
    - debian/control: Add binary package. Depend on python-ethtool.
    - debian/python-koan.install: Install koan python modules.
  * debian/patches/35_fix_hardlink_bin_path.patch:
    - Fix hardlink tool bin path and arguments as hardlink in Ubuntu/Debian
      is a different tool from other distros (Fedora/RHEL).

  [ Dustin Kirkland]
  * debian/cobbler.templates, debian/cobbler.config, debian/cobbler.postinst:
    - add a debconf question for the cobbler user's password
    - update the cobbler/admin user's password in cobbler/settings
  * debian/control:
    - depend on openssl, which we use to update the password in cobbler/settings
  * debian/patches/33_authn_configfile.patch:
    - move from denyall to configfile authentication now that the password
      is debconf-managed; makes cobbler work out of the box, LP: #741661
  * debian/patches/34_fix_apache_wont_start.patch:
    - comment out line that's causing Apache to fail to start, LP: #741661
  * debian/cobbler.postinst, debian/cobbler.postrm:
    - fix installation errors associated with restarting apache2 here
    - a2enmod wsgi
  * debian/cobbler-web.dirs, debian/cobbler-web.postinst:
    - must create/chown web sessions directory to www-data for the web ui
      to be usable, LP: #741661

 -- Dustin Kirkland <kirkland@ubuntu.com>  Mon, 04 Apr 2011 12:55:44 -0500

cobbler (2.1.0-0ubuntu2) natty; urgency=low

  * debian/rules: clean out manpage zipfiles, so that rebuilds work,
    LP: #746847
  * debian/cobbler-web.postinst: LP: #746854
    - fix broken link
    - use ln -sf so that upgrades work

 -- Dustin Kirkland <kirkland@ubuntu.com>  Thu, 31 Mar 2011 19:23:29 -0500

cobbler (2.1.0-0ubuntu1) natty; urgency=low

  * New upstream release.
  * Make it a bit more easier to configure cobbler_web (LP: #741661)
  * Drop java dependencies since cobbler4j is no longer shipped upstream.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 31 Mar 2011 08:54:56 -0400

cobbler (2.1.0~bzr2005-0ubuntu2) natty; urgency=low

  * debian/patches/31_add_ubuntu_koan_utils_support.patch: Add support for
    ubuntu distro in koan utils.py.
  * debian/patches/32_fix_koan_import_yum.patch: Fix import error of yum
    python module; adds flexibility for other package managers. (LP: #731620)

 -- Andres Rodriguez <andreserl@ubuntu.com>  Fri, 11 Mar 2011 16:02:48 -0500

cobbler (2.1.0~bzr2005-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstream release. 

  [Andres Rodriguez]
  * Add python-koan package (LP: #731616):
    - debian/control: Add python-koan binary package; fix typo
    - debian/python-cobbler.install: Do not install koan python modules.
    - debian/python-koan.install: Add. Install koan python modules.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 11 Mar 2011 07:59:55 -0500

cobbler (2.1.0~bzr2002-0ubuntu1) natty; urgency=low

  * New upstream release. 

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 25 Feb 2011 14:47:03 -0500

cobbler (2.1.0~bzr1998-0ubuntu1) natty; urgency=low

  * New upstream release.
  * Dropped:
    - debian/patches/01-ubuntu-webroot.patch: Accepted upstream.
    - debian/patches/04-logfile-check.patch: Accepted upstream.
    - debian/patches/05_fix_init_paths.patch: Accepted upstream.
    - debian/patches/11_support-other-wol-tools.patch: Accepted upstream.
    - debian/patches/22_re-enable_debmirror.patch: Accepted upstream.
    - debian/patches/03-localboot-value.patch: Accepted upstream.
   * debian/control: Add python-all as a build dependency.
   * debian/patches/05_cobbler_fix_reposync_permissions.patch: 
     Fix reposync permissions. (LP: #710757)
   * debian/patches/12_fix_dhcp_restart.patch: Fix dhcp restart.
     (LP: #709723)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 28 Jan 2011 14:39:12 -0500

cobbler (2.1.0~bzr1988-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstram release.
  * Re-added get-orig-source to make it easier to make a tarball.
  * Dropped 02_install-layout.patch
  * Added Debian/README.Source
  * Reworked webroot patch
  * debian/cobbler-common.install: Don't put the init script
    in /etc/cobbler. (LP: #705441)
  * debian/patches/05_fix_init_paths.patch: Don't hard code init paths
    (LP: #706995)

  [Dave Walker (Daviey)]
  * debian/control: For binary package koan, do not depend on cobbler as it should 
    be functional separately. However, the additional dependency of libvirt-bin 
    has been added.  (LP: #707113)

  [ Clint Byrum ]
  * debian/patches/series: remove 02_install-layout.patch

 -- Clint Byrum <clint@ubuntu.com>  Tue, 25 Jan 2011 16:46:04 -0800

cobbler (2.1.0~bzr1881-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * Initial release

  [Dave Walker (Daviey)]
  * Imported upstream snapshot r1881
  * Refreshed and cleaned patches
  * debian/control: Updated maintainer to match current policy
  * debian/patches/series: Removed patch that was previously dropped
  * debian/patches/*: Added initial DEP-3 patch tagging.
  * debian/patches/03-localboot-value.patch: Changed localboot value
    to be more reliable with later versions of (sys|pxe)linux.
  * debian/rules: Removed get-orig-source as it is currently not required.

  [Clint Byrum]
  * debian/copyright: changed to DEP5 format and added 
    license/copyright info where applicable.

   [James Page]
  * Added libcobbler4j-java package.

 -- Dave Walker (Daviey) <DaveWalker@ubuntu.com>  Tue, 18 Jan 2011 12:03:14 +0000