~ubuntu-branches/ubuntu/precise/keystone/precise-security : changes

~ubuntu-branches/ubuntu/precise/keystone/precise-security » Changes from revision 31

From Revision 31 to 12

Rev	Summary	Authors	Tags	Date
31	* SECURITY UPDATE: delete user token immediately upon delete... * SECURITY UPDATE: delete user token immediately upon delete when using v2 API - CVE-2013-2059.patch: adjust keystone/identity/core.py to call token_api.delete_token() during delete. Also update test suite. - CVE-2013-2059 - LP: #1166670	Jamie Strandboge	2012.1.3+stable-20130423-f48dd0fc-0ubuntu1.1	10 years ago
30	* SECURITY UPDATE: fix EC2-style authentication for disabled... * SECURITY UPDATE: fix EC2-style authentication for disabled users - debian/patches/CVE-2013-0282.patch: adjust keystone/contrib/ec2/core.py to ensure user and tenant are enabled in EC2 - CVE-2013-0282 - LP: #1121494 * SECURITY UPDATE: fix denial of service - debian/patches/CVE-2013-1664+1665.patch: disable XML entity parsing - CVE-2013-1664 - CVE-2013-1665 - LP: #1100279	Jamie Strandboge	2012.1+stable~20120824-a16a0ab9-0ubuntu2.5	11 years ago
29	* SECURITY UPDATE: fix token creation error handling * SECURITY UPDATE: fix token creation error handling - debian/patches/CVE-2013-0247.patch: validate size of user_id, username, password, tenant_name, tenant_id and token size to help guard against a denial of service via large log files filling the disk - CVE-2013-0247	Jamie Strandboge	2012.1+stable~20120824-a16a0ab9-0ubuntu2.4	11 years ago
28	* SECURITY UPDATE: fix for EC2-style credentials invalidatio... * SECURITY UPDATE: fix for EC2-style credentials invalidation - debian/patches/CVE-2012-5571.patch: adjust contrib/ec2/core.py to verify that the user is in at least one valid role for the tenant - CVE-2012-5571 - LP: #1064914	Jamie Strandboge	2012.1+stable~20120824-a16a0ab9-0ubuntu2.3	11 years ago
27	* SECURITY UPDATE: Pre-existing tokens continue to be valid ... * SECURITY UPDATE: Pre-existing tokens continue to be valid after granting or revoking a user's access (LP: #1041396) - debian/patches/keystone-CVE-2012-4413.patch: invalidate all user tokens upon role grant/revoke - CVE-2012-4413	Steve Beattie	2012.1+stable~20120824-a16a0ab9-0ubuntu2.2	11 years ago
26	* SECURITY UPDATE: tenants are able to be added to users wit... * SECURITY UPDATE: tenants are able to be added to users without authorization (LP: #1040626) - debian/patches/keystone-CVE-2012-3542: require authz to update a user's tenant. - CVE-2012-3542	Steve Beattie	2012.1+stable~20120824-a16a0ab9-0ubuntu2.1	11 years ago
25	* New upstream version. * New upstream version. * debian/man/keystone.8: Mention that there is a lack of ssl support.	Chuck Short	2012.1-0ubuntu1	12 years ago
24	[Chuck Short] [Chuck Short] * New upstream version. * debian/keystone.install: install tools/{convert_to_sqlite.sh, sample_data.sh} [Adam Gandelman] * debian/patches/fix-ubuntu-tests.patch: Also skip keystoneclient essex 3 tests, add patch description * debian/keystone.logrotate: Add logrotate config (LP: #962426)	Chuck Short	2012.1~rc2-0ubuntu1	12 years ago
23	[Chuck Short] [Chuck Short] * New usptream version. * debian/control: Add python-iso8601 as a depends. * debian/patches/fix-ubuntu-tests.patch: Disable git checkout on some of the tests. * dropped swift as a depends. [Adam Gandelman] * debian/patches/sql_connection.patch: Refresh * debian/logging.conf: Update and enable file logging (LP: #959610) * debian/keystone.prerm: Only attempt to cleanup database if it was configured during installation. (LP: #948719) * debian/rules: Fix doc builds + clean (LP: #956019) * debian/control: Add python-{nova, swift} as Build-Depends, required for doc building * debian/rules, debian/tests/test_overrides.conf: Setup a proper environment for unit testing	Chuck Short	2012.1~rc1-0ubuntu1	12 years ago
22	New upstream release. New upstream release.	Adam Gandelman	2012.1~rc1~20120316.2145-0ubuntu1	12 years ago
21	[ Adam Gandleman ] [ Adam Gandleman ] * debian/patches/keystone-auth.patch: Drop, applied upstream at commit 29337e66. * debian/patches/sql_connection.patch: Refresh [ Chuck Short ] * New upstream release. * debian/patches/sql_connection.patch: Refreshed.	Chuck Short	2012.1~rc1~20120308.2103-0ubuntu1	12 years ago
20	debian/keystone.preinst: Create group before creating user (... debian/keystone.preinst: Create group before creating user (LP: #945299)	Adam Gandelman	2012.1~e4-0ubuntu2	12 years ago
19	[ Chuck Short ] [ Chuck Short ] * New upstream release. * debian/keystone.upstart: Update for ksl. * debian/control: Add python-keystoneclient as dependency. * debian/control: Fix typo. * debian/keystone.postinst: Update due to redux branch change. * debian/keystone.templates, debian/keystone.preinst, debian/kestone.postinst, debian/keystone.config, debian/README.Debian: Make keystone installation less interactive. (LP: #931236) * debian/keystone.postinst: Don't create users or run a database sync since its not working correctly. * debian/control: Dropped python-coverage and python-nosexcover. * debian/changelog: Fixed changelog. * debian/keystone.templates: Set it to false. * debian/control: Fix lintian warnings. * debian/patches/keystone-auth.patch: Backport auth token improvements, this can be dropped in the next snapshot. * debian/control: Add python-memcache as a build dependency. * debian/keystone-doc.docs: Fix keystone doc builds. * debian/rules: Temporarily disable doc install. * debian/control: Add python-ldap and python-lxml. [ Joseph Heck ] * debian/control: Dropped python-cli. [ Adam Gandelman ] * debian/control: Alphabetize python depends * debian/control: Add python-{eventlet, greenlet, passlib} to keystone depends * debian/control: Add python-lxml to python-keystone Depends * Drop 0001-Fix-keystone-all-failure-to-start.patch * debian/logging.conf: Temporarily use old logging.conf until upstream ships something usable * debain/patches/sql_connection.patch: Switch backends to use SQL backends * debian/keystone.preinst: Create directories * debian/keystone.postinst: Remove create_users stuff, add call to 'db_sync' on install [ Dave Walker ] * debian/patches/sql_connection.patch: Refreshed and reintroduced DEP-3 headers. * debian/control: Added Vcs-Bzr field. [ Andrew Glen-Young ] * debian/keystone.preinst: Set the primary group to keystone. (LP: #941905)	Chuck Short	2012.1~e4-0ubuntu1	12 years ago
18	Update "db sync" to "sync_database" in postinst. (LP: #93044... Update "db sync" to "sync_database" in postinst. (LP: #930444)	Martin Pool	2012.1~e4~20120203.1574-0ubuntu3	12 years ago
17	[Chuck Short] [Chuck Short] * debian/control: Moved python-prettytable and added python-dateutil as a build dependency. [Julien Danjou] * Add dbconfig support. (LP: #930139)	Chuck Short	2012.1~e4~20120203.1574-0ubuntu2	12 years ago
16	[Chuck Short] [Chuck Short] * New upstream release. * Dropped debian/patches/temp_fix_keystone_manage.patch: No longer needed. [Daniel Polehn] * Fix bad manpage formatting causng missing spaces. (LP: #907206) * Adding python-prettytable to dependency. (LP: #922954)	Chuck Short	2012.1~e4~20120203.1574-0ubuntu1	12 years ago
15	* New upstream release. * New upstream release. * Dropped debian/patches/temp_fix_keystone_manage.patch: No longer needed.	Chuck Short	2012.1~e3-0ubuntu1	12 years ago
14	[Chuck Short] [Chuck Short] * New upstream version. * debian/control: Add python-migrate as a build depenedency. (LP: #909941) * debian/keystone.dirs: Add cache directory for PTYHON_EGGS * debian/control: Add ssl-cert for ssl certificates. * debian/patches/keystone-ssl.patch: Point ssl config to the snakeoil certificates. * debian/control: Add python-nose as a build dependency. [Adam Gandleman] * debian/python-keystone.postinst: Also install .egg-info (LP: #907518) debian/patches/temp_fix_keyston_manage.patch: Allow keystone to work with current snapshot.	Chuck Short	2012.1~e3~20120113.1511-0ubuntu1	12 years ago
13	* New upstream version. * New upstream version. * debian/control: Clean up dependencies. * debian/pydist-overrides: Dont install python-coverage. * debian/python-keystone.install: Don't ship examples in python packaging. (Debian Bug: #649907) * debian/man/*: Add manpages.	Chuck Short	2012.1~e2-0ubuntu1	12 years ago
12	New upstream release. New upstream release.	Chuck Short	2012.1~e2~20111209.1405-0ubuntu1	12 years ago

Older »