~ubuntu-branches/ubuntu/precise/maas/precise-security : changes

~ubuntu-branches/ubuntu/precise/maas/precise-security » Changes from revision 18

From Revision 18

Rev	Summary	Authors	Tags	Date
18	* Fix compatibility with mod-wsgi security update (LP: #1399... * Fix compatibility with mod-wsgi security update (LP: #1399016) - debian/patches/home-directory.patch: specify a valid home directory for the maas user, since mod-wsgi no longer works without one.	Marc Deslauriers	1.2+bzr1373+dfsg-0ubuntu1~12.04.6	9 years ago
17	* SECURITY UPDATE: incorrect Content-type header allowed cro... * SECURITY UPDATE: incorrect Content-type header allowed cross-site scripting vulnerability if an unknown API was used. (LP: #1251336) - debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force browsers to not render error messages as HTML. - CVE-2013-1070 * SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable password. (LP: #1254034) - debian/maas-region-controller.postinst: chown and chmod /etc/maas/txlongpoll.yaml with correct permissions - CVE-2013-1069	Seth Arnold	1.2+bzr1373+dfsg-0ubuntu1~12.04.5	10 years ago
16	* SECURITY UPDATE: failure to authenticate downloaded conten... * SECURITY UPDATE: failure to authenticate downloaded content (LP: #1039513) - debian/patches/CVE-2013-1058.patch: Authenticate downloaded files with GnuPG and MD5SUM files. Thanks to Julian Edwards. - CVE-2013-1058 * SECURITY UPDATE: configuration options may be loaded from current working directory (LP: #1158425) - debian/patches/CVE-2013-1057-1-2.patch: Do not load configuration options from the current working directory. Thanks to Julian Edwards. - CVE-2013-1057	Seth Arnold	1.2+bzr1373+dfsg-0ubuntu1~12.04.4	10 years ago
15	* New upstream release (Fixes LP: #981103) * New upstream release (Fixes LP: #981103) * debian/maas.postinst: - Make sure rabbitmq and postgresql are started on upgrade (LP: #981282) - Handle upgrades from any lower than 0.1+bzr462+dfsg-0ubuntu1 to correctly re-generate passwords, and not have db sync/migrate issues as config has changed upstream. - Correctly set Passwords for PSERV, otherwise it won't set new passwords. * Allow MAAS_DEFAULT_URL reconfiguration. (LP: #980970) - debian/maas.config: Add reconfigure validation to correctly allow it, and ask a question. - debian/maas.postinst: Reconfigure DEFAULT_MAAS_URL as well as cobbler server and next_server for PXE/Provisioning. - debian/maas.templates: Add debconf question and update info. * Do not lose MAAS_DEFAULT_URL settings on upgrade (LP: #984309) * debian/maas.postinst: - Set cobbler password in between quotes (LP: #984427) - Do not change permissions to maas.log (LP: #980915) * no longer use maas-cloudimg2ephemeral, but rather use premade images at http://maas.ubuntu.com	Andres Rodriguez	0.1+bzr482+dfsg-0ubuntu1	12 years ago
14	* New upstream release (LP: #980240) * New upstream release (LP: #980240) [ Scott Moser ] * add dependency on distro-info (LP: #949442) * debian/control: add dependency on tgt for ephemeral iscsi environment [ Andres Rodriguez ] * Make package lintian clean: - maas{-dhcp}.lintian-overrides: Add to make lintian clean. - debian/control: Add missing dependencies; correct section and desc. - debian/maas.postinst: Do not use absolute path for rabbitmqctl. - debian/patches: Add headers to all patches. * debian/maas-dhcp.postrm: Added to disable dnsmasq in cobbler on removal. * debian/maas.config: Do not set a password with pwgen as it is not an essential package; allow dbconfig-common to create a password instead by creating an empty question. (LP: #977475) * Run MAAS, pserv, txlongpoll as non-root user. (LP: #975436) - debian/maas.postinst: Create user/group; set correct permissions for directories. - debian/maas.postrm: Remove user/group; restart apache2. - debian/maas.maas-{pserv,txlongpoll}.upstart: Update to run as non-root 'maas' user. * debian/patches/01-fix-database-settings.patch: Remove adding of PSERV_URL. * debian/maas.postinst: - Handle config file upgrade from versions lower than 0.1+bzr445+dfsg-0ubuntu1, by creating new passwords and updating accordingly - use local variables in functions. - Handle maas tgt configuration for upgrades from 0.1+bzr459+dfsg-0ubuntu1. * debian/extras/99-maas: Add squid-deb-proxy file to enable PPAs. (LP: #979383) * debian/maas.install: Install missing commissioning-user-data script. [ Dave Walker (Daviey) ] * debian/patches/02-pserv-config.patch: Refreshed to apply to updated config. [ Gavin Panella ] * debian/maas.postinst: Update pserv.yaml and maas_local_settings.py to use password.	Andres Rodriguez	0.1+bzr462+dfsg-0ubuntu1	12 years ago
13	* debian/maas-dhcp.{config,postinst}: * debian/maas-dhcp.{config,postinst}: - Fix not setting new values on fresh install. (LP: #975321) - Fix unsetting domain, otherwise, even if disabled, it will always be set. * debian/control: Depends on maas for maas-dhcp.	Andres Rodriguez	0.1+bzr415+dfsg-0ubuntu2	12 years ago
12	* debian/control: Update package descriptions; Suggests maas... * debian/control: Update package descriptions; Suggests maas-dhcp for maas and add a maas-dhcp binary. * Add maas-dhcp package to configure a DHCP server. - debian/maas-dhcp.config: Add to ask debconf questions about range, gateway, and domain. - debian/maas-dhcp.postinst: Handle update of config values. - debian/maas-dhcp.templates: Debconf questions. * debian/po: Update for templates. * Add message telling MAAS URL after installation. - debian/maas.templates: Add message. - debian/maas.postinst: Display message. * debian/maas.config: Hide dbconfig-install question.	Andres Rodriguez	0.1+bzr415+dfsg-0ubuntu1	12 years ago
11	* debian/patches/{02-pserv-config,03-txlongpoll-config}.patc... * debian/patches/{02-pserv-config,03-txlongpoll-config}.patch: Refreshed. * debian/maas.install: Install maas-gc cronjob. * Add apport hook. - debian/maas.apport: Add hook. - debian/rules: Install with apport. * debian/maas.logrotate: Add logrotate for txlongpoll and pserv logs. * Create 'var/lib/media/maas/storage' on postinst to have right permissions. - debian/maas.dirs: Drop dir creation. - debian/maas.postinst: Create dir with correct permissions. - debian/maas.postrm: Remove dir on purge.	Andres Rodriguez	0.1+bzr400+dfsg-0ubuntu1	12 years ago
10	* maas.dirs: Create var/lib/maas/media/storage for juju stor... * maas.dirs: Create var/lib/maas/media/storage for juju storage. * maas.postinst: - Give correct permissions to above dir. - stop apache2 before db upgrade, and restart after.	Andres Rodriguez	0.1+bzr378+dfsg-0ubuntu1	12 years ago
9	[ Dave Walker (Daviey) ] [ Dave Walker (Daviey) ] * debian/control: Add openssh-server as a Recommends, and wrap-and-sort. [ Andres Rodriguez ] * debian/maas.postinst: - Do not start apache with apache2ctl. Use invoke-rc.d instead to not fail in the installer. - For start of postgresql before creating the DB, otherwise it will fail in the installer. - Add check of invoke-rc.d for syslog. - Add check of invoke-rc.d for rabbitmq-server; Add check for rabbitmqctl - Add db_stop, in case invoke-rc.d fails. * debian/control: Tight python-django-maas dependency. * debian/postrm: Add check for rabbitmqctl. * debian/maas.maas-txlongpoll.upstart: Create rabbitmq longpoll user/vhost and set permissions if they don't exist. Start on rabbitmq-server-running.	Andres Rodriguez	0.1+bzr363+dfsg-0ubuntu1	12 years ago
8	[ Dave Walker (Daviey) ] [ Dave Walker (Daviey) ] * d/patches/03-txlongpoll-config.patch: Resolve typo error from prior patch. - LP: #961031 [ Andres Rodriguez ] * debian/maas.config: Don't allow reconfigure. * debian/maas.postinst: Don't allow reconfigure. Run sync/migrate db on all upgrades. [ Scott Moser ] * add rsylog config for logging node boots (LP: 960149)	Andres Rodriguez	0.1+bzr338+dfsg-0ubuntu1	12 years ago
7	* New upstream snapshot. * New upstream snapshot. [ Dave Walker ] * debian/maas.postinst: Do not import ISO's at install time. * debian/control: - Drop run-one, it's not a requirement and currently in universe. - Drop python-setproctitle, no longer required. [ Andres Rodriguez ] * debian/control: Depends on python-avahi, python-dbus, and avahi-daemon. * debian/maas.postinst: - Only syncdb if dbconfig db creation was selected. - Set rabbitmq/longpoll settings * debian/patches/03-txlongpoll-config.patch: Updated broker settings for rabbitmq.	Andres Rodriguez	0.1+bzr315+dfsg-0ubuntu1	12 years ago
6	* debian/patches: * debian/patches: - 01-fix-database-settings.patch: Update PSERV_URL port. - 02-pserv-config.patch: Update, and set 'maas' as username. - 03-longpoll-config.patch: Update. * debian/maas.install: Install preseeds and snippets. * debian/maas.postinst: - Set password for 'maas' cobbler username (in pserv and cobbler). - Set DEFAULT_MAAS_URL to IP of interface with default gateway.	Andres Rodriguez	0.1+bzr300+dfsg-0ubuntu1	12 years ago
5	* debian/patches: * debian/patches: - 01-fix-database-settings.patch: Update to set PSERV_URL. - 02-pserv-config.patch: Set port to 8001. * debian/maas.postinst: Run maas-import-isos on install. * debian/control: Depends on rabbitmq-server.	Andres Rodriguez	0.1+bzr295+dfsg-0ubuntu2	12 years ago
4	* New upstream snapshot. * New upstream snapshot. [ Dave Walker ] * debian/control: - Changed depends from psycopg2 to python-psycopg2 and dropped versioning. - LP: #937982 [ Andres Rodriguez ] * debian/maas.install: Install maas-import-isos and related files. * Integrate squid3 as proxy solution: - debian/extras/squid.conf: Added - debian/control: Depend on squid3. - debian/maas.{postinst,postrm}: Handle installation/removal of custom squid config file. * Split into different binary packages (maas,python-django-maas). - debian/maas.postinst: Handle the apache2 configuration.	Andres Rodriguez	0.1+bzr232+dfsg-0ubuntu1	12 years ago
3	* New upstream snapshot, post 0.1 release. * New upstream snapshot, post 0.1 release. * debian/control: - Drop depends on rabbitmq-server, no longer required. - Drop versioning of depends psycopg2, no longer required. * debian/watch: Introduced watch file.	Dave Walker (Daviey)	0.1+bzr171+dfsg-0ubuntu1	12 years ago
2	Initial release Initial release	Julian Edwards	0.1~bzr146+dfsg-0ubuntu1	12 years ago
1	Import upstream version 0.1~bzr146+dfsg Import upstream version 0.1~bzr146+dfsg	Julian Edwards	upstream-0.1~bzr146+dfsg	12 years ago