~ubuntu-branches/ubuntu/quantal/keystone/quantal-proposed : changes

~ubuntu-branches/ubuntu/quantal/keystone/quantal-proposed » Changes from revision 41

From Revision 41 to 22

Rev	Summary	Authors	Tags	Date
41	debian/patches/update_certs.patch: Fix FTBFS. Original SSL ... debian/patches/update_certs.patch: Fix FTBFS. Original SSL certs for test suite expired May 18 2013. Cherry-picked regenerated certs from stable/folsom commit c14f2789.	James Page	2012.2.4-0ubuntu3	10 years ago
40	* Rebase on latest security fixes. * Rebase on latest security fixes. * SECURITY UPDATE: delete user token immediately upon delete when using v2 API - CVE-2013-2059.patch: adjust keystone/identity/core.py to call token_api.delete_token() during delete. Also update test suite. - CVE-2013-2059 - LP: #1166670	James Page	2012.2.4-0ubuntu2	10 years ago
39	* Dropped patches, applied upstream: * Dropped patches, applied upstream: - debian/patches/CVE-2013-1865.patch: [255b1d4] - debian/patches/CVE-2013-0282.patch: [f0b4d30] - debian/patches/CVE-2013-1664+1665.patch: [8a22745] * Resynchronize with stable/folsom (09f28020) (LP: #1179707): - [5ea4fcf] V2 API reported at Beta LP: 1135230 - [1889299] PKI-signed token hash saved as token ID for SQL backend only LP: 1073272 - [40660f0] Key PKI tokens on hash in memcached for auth_token middleware LP: 1073343 - [b3ce6a7] Use the right subprocess based on os monkeypatch - [bb1ded0] keystone-all --config-dir is being ignored LP: 1101129 - [9e0a97d] Temporary network outage results in connection refused and invalid token LP: 1150299 - [255b1d4] Validation of PKI tokens bypasses revocation check LP: 1129713 - [8690166] PKI tokens are broken after 24 hours LP: 1074172 - [790c87e] PKI tokens are broken after 24 hours LP: 1074172 - [f0b4d30] EC2 authentication does not ensure user or tenant is enabled LP: 1121494 - [8a22745] DoS through XML entity expansion (CVE-2013-1664) LP: 1100282	Adam Gandelman	2012.2.4-0ubuntu1	10 years ago
38	* Resync with latest security updates. * Resync with latest security updates. * SECURITY UPDATE: fix PKI revocation bypass - debian/patches/CVE-2013-1865.patch: validate tokens from the backend - CVE-2013-1865 * SECURITY UPDATE: fix EC2-style authentication for disabled users - debian/patches/CVE-2013-0282.patch: adjust keystone/contrib/ec2/core.py to ensure user and tenant are enabled in EC2 - CVE-2013-0282 * SECURITY UPDATE: fix denial of service - debian/patches/CVE-2013-1664+1665.patch: disable XML entity parsing - CVE-2013-1664 - CVE-2013-1665	James Page	2012.2.3+stable-20130206-82c87e56-0ubuntu2	11 years ago
37	[ Adam Gandelman ] [ Adam Gandelman ] * Dropped patches, applied upstream: - debian/patches/CVE-2013-0247.patch: [bb2226f] * Resynchronize with stable/folsom (82c87e56) (LP: #1116671): - [bb2226f] Add size validations for /tokens. - [ec7b94d] Non-API specific 404 exposes traceback LP: 1089987 - [70e55f9] SQL backend fails if not all URL are defined in an endpoint LP: 1061736 - [6c95b73] Unparseable endpoint URL's should raise a user friendly error LP: 1058494 - [9e300b7] Test 0.2.0 keystoneclient to avoid new deps - [ec06625] serviceCatalog is dict in the case of no endpoints LP: 1087405 [ Chuck Short ] * debian/patches/fix-ubuntu-tests.patch: Refreshed.	Adam Gandelman	2012.2.3+stable-20130206-82c87e56-0ubuntu1	11 years ago
36	* Ubuntu updates: * Ubuntu updates: - debian/control: Ensure keystoneclient is upgraded with keystone, require python-keystoneclient >= 1:0.1.3. (LP: #1073273) - Dropped patches, applied upsteram: - debian/patches/CVE-2012-5563.patch - debian/patches/CVE-2012-5571.patch - debian/patches/fix-ssl-tests-lp1068851.patch * Resynchronize with stable/folsom (7869c3ec) (LP: #1085255): - [f9d4766] token expires time incorrect for auth by one token (LP: #1079216) - [80d63c8] keystone throws error when removing user from tenant. (LP: #1078497) - [37308dd] Removing user from a tenant isn't invalidating user access to tenant (LP: #1064914) - [bec9b68] Redo part of bp/sql-identiy-pam undone by bug 968519 (LP: #1068674) - [ee645e6] Jenkins jobs fail because of incompatibility between sqlalchemy- migrate and the newest sqlalchemy-0.8.0b1 (LP: #1073569) - [094c494] Non PKI Tokens longer than 32 characters can never be valid (LP: #1060389) - [3cd343b] Openssl tests rely on expired certificate (LP: #1068851) - [2f9807e] Set defaultbranch in .gitreview to stable/folsom	Adam Gandelman	2012.2.1-0ubuntu1	11 years ago
35	* SECURITY UPDATE: fix for EC2-style credentials invalidatio... * SECURITY UPDATE: fix for EC2-style credentials invalidation - debian/patches/CVE-2012-5571.patch: adjust contrib/ec2/core.py to verify that the user is in at least one valid role for the tenant - CVE-2012-5571 - LP: #1064914 * debian/patches/fix-ssl-tests-lp1068851.patch: update certificates for SSL tests * SECURITY UPDATE: fix for token expiration - debian/patches/CVE-2012-5563.patch: ensure token expiration is maintained - CVE-2012-5563 - LP: #1079216	Jamie Strandboge	2012.2-0ubuntu1.2	11 years ago
34	New upstream release. New upstream release.	Chuck Short	2012.2-0ubuntu1	11 years ago
33	New upstream release. New upstream release.	Chuck Short	2012.2~rc2-0ubuntu1	11 years ago
32	* New upstream version. * New upstream version. * debian/keystone.logrotate: Compress log file when rotated. (LP: #1049309)	Chuck Short	2012.2~rc1-0ubuntu1	11 years ago
31	[ Adam Gandelman ] [ Adam Gandelman ] * Refreshed patches. [ Soren Hansen ] * Update debian/watch to account for symbolically named tarballs and use newer URL. * Fix Launchpad URLs in debian/watch. [ Logan Rosen ] * Fix control file to suggest python-memcache instead of python-memcached (LP: #998991). [ Chuck Short ] * New upstream version. * Dont FTBFS if the testsuite fails.	Chuck Short	2012.2~rc1~20120906.2517-0ubuntu2	11 years ago
30	[ Adam Gandelman ] [ Adam Gandelman ] * debian/{keystone.conf, rules, keytone.install}: Install patched keystone.conf.sample configured for SQL backends to /etc/keystone, no longer maintain our own version in packaging. (LP: #1031012) * debian/patches/sql_connection.patch: Refreshed against current keystone.conf.sample. * debian/rules: Use debian/tests as HOME to avoid test suite FTFBS. [ Sam Morrison ] * debian/keystone.logrotate: Sent output of keystone restart in logrotate to /dev/null. (LP: #1029766) [Chuck Short] * New upstream version.	Chuck Short	2012.2~f3-0ubuntu1	11 years ago
29	New upstream version. New upstream version.	Chuck Short	2012.2~f2-0ubuntu1	11 years ago
28	New upstream release. New upstream release.	Chuck Short	2012.2~f2~20120622.2353-0ubuntu1	11 years ago
27	* New usptream release. * New usptream release. * debian/patches/sql_connection.patch: Refreshed	Chuck Short	2012.2~f2~20120529.2315-0ubuntu1	11 years ago
26	* New ustpream release. * New ustpream release. * Prepare for quantal: - debian/patches/fix-ubuntu-tests.patch: Refreshed. - debian/patches/sql_connection.patch: Refreshed. * debian/keystone.install: Install the right configuration files.	Chuck Short	2012.2~f1-0ubuntu1	11 years ago
25	* New upstream version. * New upstream version. * debian/man/keystone.8: Mention that there is a lack of ssl support.	Chuck Short	2012.1-0ubuntu1	12 years ago
24	[Chuck Short] [Chuck Short] * New upstream version. * debian/keystone.install: install tools/{convert_to_sqlite.sh, sample_data.sh} [Adam Gandelman] * debian/patches/fix-ubuntu-tests.patch: Also skip keystoneclient essex 3 tests, add patch description * debian/keystone.logrotate: Add logrotate config (LP: #962426)	Chuck Short	2012.1~rc2-0ubuntu1	12 years ago
23	[Chuck Short] [Chuck Short] * New usptream version. * debian/control: Add python-iso8601 as a depends. * debian/patches/fix-ubuntu-tests.patch: Disable git checkout on some of the tests. * dropped swift as a depends. [Adam Gandelman] * debian/patches/sql_connection.patch: Refresh * debian/logging.conf: Update and enable file logging (LP: #959610) * debian/keystone.prerm: Only attempt to cleanup database if it was configured during installation. (LP: #948719) * debian/rules: Fix doc builds + clean (LP: #956019) * debian/control: Add python-{nova, swift} as Build-Depends, required for doc building * debian/rules, debian/tests/test_overrides.conf: Setup a proper environment for unit testing	Chuck Short	2012.1~rc1-0ubuntu1	12 years ago
22	New upstream release. New upstream release.	Adam Gandelman	2012.1~rc1~20120316.2145-0ubuntu1	12 years ago

Older »