~ubuntu-branches/ubuntu/precise/swift/precise-security : changes

~ubuntu-branches/ubuntu/precise/swift/precise-security » Changes from revision 41

From Revision 41 to 22

Rev	Summary	Authors	Tags	Date
41	[ Marc Deslauriers ] [ Marc Deslauriers ] * SECURITY UPDATE: metadata constraint bypass via multiple requests - debian/patches/CVE-2014-7960.patch: add metadata checks to swift/account/server.py, swift/common/constraints.py, swift/common/db.py, swift/container/server.py, added tests to test/unit/common/test_db.py, test/functionalnosetests/test_account.py, test/functionalnosetests/test_container.py. - CVE-2014-7960 [ Jamie Strandboge ] * debian/patches/CVE-2014-7960.patch: - adjust unittests since we use webob.exc and not the newer swob - adjust functional tests to properly skip if test environment is not specified and to not interfere with other functional tests * debian/control: Build-Depends on python-mock	Jamie Strandboge	1.4.8-0ubuntu2.5	8 years ago
40	* SECURITY UPDATE: timing side-channel attack in TempURL * SECURITY UPDATE: timing side-channel attack in TempURL - debian/patches/CVE-2014-0006.patch: use constant time comparison in swift/common/middleware/tempurl.py. - CVE-2014-0006	Marc Deslauriers	1.4.8-0ubuntu2.4	10 years ago
39	* SECURITY UPDATE: Fix handling of DELETE obj reqs with old ... * SECURITY UPDATE: Fix handling of DELETE obj reqs with old timestamp - debian/patches/CVE-2013-4155.patch: don't create tombstone files when a file with a newer timestamp exists - CVE-2013-4155 - LP: #1196932	Jamie Strandboge	1.4.8-0ubuntu2.3	10 years ago
38	* SECURITY UPDATE: fix unchecked input in XML responses * SECURITY UPDATE: fix unchecked input in XML responses - debian/patches/CVE-2013-2161.patch: use saxutils.quoteattr() on account name - CVE-2013-2161 - LP: #1183884 * SECURITY UPDATE: optionally allow using secure json serialization instead of pickle. - debian/patches/CVE-2012-4406.patch: add memcache_serialization_support option and update man pages - debian/patches/memcache_serialization_support-default-to-zero.patch: default to insecure pickle configuration for people upgrading. Interested users can adjust this as desired - CVE-2012-4406 - LP: #1006414	Jamie Strandboge	1.4.8-0ubuntu2.2	10 years ago
37	debian/patches/fix-ubuntu-unittests.patch: Refreshed debian/patches/fix-ubuntu-unittests.patch: Refreshed to fix testsuite failures.	Chuck Short	1.4.8-0ubuntu2	12 years ago
36	* New upstream release. * New upstream release. * debian/patches/fix-ubuntu-unittests.patch: Refreshed. * debian/patches/fix-doc-no-network.patch: Dont access network when trying to build docs.	Chuck Short	1.4.8-0ubuntu1	12 years ago
35	* debian/rules: Make the build fail if the testsuite doesnt ... * debian/rules: Make the build fail if the testsuite doesnt pass. * debian/patches/fix-ubuntu-unittests.patch: Various fixes to build swift in the buildds.	Chuck Short	1.4.7-0ubuntu3	12 years ago
34	* Fixup upstart configurations (LP: #954477): * Fixup upstart configurations (LP: #954477): - d/rules: Correctly generate ALL upstart configurations when building for Ubuntu. - d/*.upstart.in: Update upstart config's to use new conf file locations.	James Page	1.4.7-0ubuntu2	12 years ago
33	[ Chuck Short ] [ Chuck Short ] * New upstream release. [ Thierry Carrez (ttx) ] * Remove swift-stats-populate, swift-stats-report and stats.conf-sample to match Swift 1.4.7 contents	Chuck Short	1.4.7-0ubuntu1	12 years ago
32	New upstream release. New upstream release.	Chuck Short	1.4.7~20120302.1721-0ubuntu1	12 years ago
31	[ Chuck Short ] [ Chuck Short ] * New upstream release. [ Chmouel Boudjnah ] * Add more samples to packages (LP:#667935)	Chuck Short	1.4.7~20120224.1690-0ubuntu1	12 years ago
30	* New upstream release. * New upstream release. * debian/copyright: Update to fix lintian warnings.	Chuck Short	1.4.7~20120217.1689-0ubuntu1	12 years ago
29	* New upstream release. * New upstream release. * debian/control: Add python-paste.	Chuck Short	1.4.7~20120210.1686-0ubuntu1	12 years ago
28	New upstream version. New upstream version.	Chuck Short	1.4.6~20120202.1676-0ubuntu1	12 years ago
27	* New upstream release. * New upstream release. * debian/control: Add python-paste as a build dependency. * Update swift.install to reflect release.	Chuck Short	1.4.6~20120124.1668-0ubuntu1	12 years ago
26	[Chuck Short] [Chuck Short] * New upstream release. [ Daniel T Chen ] * debian/control: Fix Vcs entries. * debian/swift.install: Add new scripts. Fixes FTBFS. [ Marc Cluet ] * Changed swift-proxy upstart script to watch /etc/swift/proxy-server.conf (LP:#917893)	Chuck Short	1.4.6~20120119.1666-0ubuntu1	12 years ago
25	[ Daniel T Chen ] [ Daniel T Chen ] * debian/control: Fix Vcs entries. * debian/swift.install: Add new scripts. Fixes FTBFS. [ Marc Cluet ] * Changed swift-proxy upstart script to watch /etc/swift/proxy-server.conf (LP:#917893)	Marc Deslauriers	1.4.6~20120112.1660-0ubuntu2	12 years ago
24	[Chuck Short] [Chuck Short] * New upstream release. * Merged changes from upstream packaging, thanks to Thierry Carrez. * debian/rules: + Remove egg-info on clean. [Thierry Carrez (ttx)] * Added usr/bin/swift-recon[-cron] to swift package.	Chuck Short	1.4.6~20120112.1660-0ubuntu1	12 years ago
23	[Chuck Short] [Chuck Short] * New upstream release. * Merged changes from upstream packaging, thanks to Thierry Carrez. * debian/rules: + Remove egg-info on clean. [Thierry Carrez (ttx)] * Added usr/bin/swift-recon[-cron] to swift package.	Chuck Short	1.4.5-0ubuntu1	12 years ago
22	debian/swift.manpages: Remove swauth man pages. debian/swift.manpages: Remove swauth man pages.	Matthias Klose	1.4.5~20111202.1634-0ubuntu3	12 years ago

Older »