~ubuntu-branches/ubuntu/precise/python-keyring/precise-updates

Viewing all changes in revision 9.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-11-19 12:50:49 UTC
  • mfrom: (8.1.1 sid)
  • Revision ID: package-import@ubuntu.com-20121119125049-mryxwft3qi7fz3pg
Tags: 0.9.2-0ubuntu0.12.04.2
* SECURITY UPDATE: CryptedFileKeyring format is insecure (LP: #1004845)
  - Rebuild python-keyring 0.9.2 from Ubuntu 12.10 as a security update
    for Ubuntu 12.04.
  - debian/patches/crypto_compat.patch: include PBKDF2() directly to be
    compatible with the older version of python-crypto in Ubuntu 12.04.
  - CVE-2012-4571
* SECURITY UPDATE: insecure default file permissions (LP: #1031465)
  - debian/patches/file_permissions.patch: set appropriate permissions on
    database directory.
  - CVE number pending
* debian/patches/fix_migration.patch: fix migration code so old
  databases get upgraded when a key is read. (LP: #1042754)
* debian/patches/fix_unlock.patch: fix unlocking an existing keyring.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: