-
Committer:
Package Import Robot
-
Author(s):
James Page
-
Date:
2013-03-22 12:02:56 UTC
-
Revision ID:
package-import@ubuntu.com-20130322120256-5kmwtiqsctqewkcn
Tags: 2012.2.3+stable-20130206-82c87e56-0ubuntu2
* Resync with latest security updates.
* SECURITY UPDATE: fix PKI revocation bypass
- debian/patches/CVE-2013-1865.patch: validate tokens from the backend
- CVE-2013-1865
* SECURITY UPDATE: fix EC2-style authentication for disabled users
- debian/patches/CVE-2013-0282.patch: adjust keystone/contrib/ec2/core.py
to ensure user and tenant are enabled in EC2
- CVE-2013-0282
* SECURITY UPDATE: fix denial of service
- debian/patches/CVE-2013-1664+1665.patch: disable XML entity parsing
- CVE-2013-1664
- CVE-2013-1665