~ubuntu-branches/ubuntu/quantal/maas/quantal-security : changes

~ubuntu-branches/ubuntu/quantal/maas/quantal-security » Changes from revision 30

From Revision 30 to 11

Rev	Summary	Authors	Tags	Date
30	* SECURITY UPDATE: incorrect Content-type header allowed cro... * SECURITY UPDATE: incorrect Content-type header allowed cross-site scripting vulnerability if an unknown API was used. (LP: #1251336) - debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force browsers to not render error messages as HTML. - CVE-2013-1070 * SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable password. (LP: #1254034) - debian/maas-region-controller.postinst: chown and chmod /etc/maas/txlongpoll.yaml with correct permissions - CVE-2013-1069	Seth Arnold	1.2+bzr1373+dfsg-0ubuntu1.2	10 years ago
29	* SECURITY UPDATE: failure to authenticate downloaded conten... * SECURITY UPDATE: failure to authenticate downloaded content (LP: #1039513) - debian/patches/CVE-2013-1058.patch: Authenticate downloaded files with GnuPG and MD5SUM files. Thanks to Julian Edwards. - CVE-2013-1058 * SECURITY UPDATE: configuration options may be loaded from current working directory (LP: #1158425) - debian/patches/CVE-2013-1057-1-2.patch: Do not load configuration options from the current working directory. Thanks to Julian Edwards. - CVE-2013-1057	Seth Arnold	1.2+bzr1373+dfsg-0ubuntu1.1	10 years ago
28	* Fix MAAS not working after CD/preseed install (LP: #106576... * Fix MAAS not working after CD/preseed install (LP: #1065763) - debian/extras/maas-region-celeryd: Add wrapper to run celery from the upstart job. - debian/extras/maas-region-controller.maas-region-celery.upstart: Create rabbitmq user if it does not exists. * debian/control: Remove unneeded deps on python-txtftp for some binary pkgs. * debian/maas-region-controller.postinst: Minor fix referencing variable.	Andres Rodriguez	0.1+bzr1264+dfsg-0ubuntu2	11 years ago
27	* New upstream release. * New upstream release. [ Raphaël Badin ] * debian/maas-region-controller.postinst: Enable proxy_http module. * debian/maas-cluster-controller.postinst: Create /var/lib/maas. (LP: #1065062) [ Andres Rodriguez ] * Install maas-provision with python-maas-provisioningserver (LP: #1065171): - debian/python-maas-provisioningserver.install: Install - debian/control: Add Conflicts/Replaces with maas-cluster-controller to handle upgrades. * debian/patches/04-fix-ipmi-enlistment.patch: Drop. Merged Upstream. * debian/control: Depends on maas-region-controller for maas-dns. * debian/maas-region-controller.postinst: Set the correct host for BROKER_URL (LP: #1065080) * Handle creation of user/group in maas-common. * debian/maas-region-controller.config: Always source dbconfig scripts.	Andres Rodriguez	0.1+bzr1264+dfsg-0ubuntu1	11 years ago
26	04-fix-ipmi-enlistment.patch: retry maas-enlist without powe... 04-fix-ipmi-enlistment.patch: retry maas-enlist without power parameters on failure. This allows enlistment to continue working with Precise ephemeral images before the Precise SRU for maas-enlist lands. (LP: #1064922).	Robie Basak	0.1+bzr1243+dfsg-0ubuntu3	11 years ago
25	debian/patches/99-ipmi-user-too-long.patch: Fix username too... debian/patches/99-ipmi-user-too-long.patch: Fix username too long for IPMI user created on enlistment (LP: #1064832)	Andres Rodriguez	0.1+bzr1243+dfsg-0ubuntu2	11 years ago
24	* New upstream release. (LP: #1064596) * New upstream release. (LP: #1064596) * debian/patches/99-temporary-fix-constraints.patch: Dropped. * debian/control: - ${python:Depends} for maas-common. - Add missing Depends for python-maas-provisioningserver (LP: #1064542) * debian/maas-cluster-controller.postinst: Create /var/log/maas if it doesn't exist (LP: #1064539)	Andres Rodriguez	0.1+bzr1243+dfsg-0ubuntu1	11 years ago
23	* New upstream release. (LP: #1062518) * New upstream release. (LP: #1062518) [ Julian Edwards ] * Split packaging of 'maas' into maas-{region,cluster}-controller - debian/control: Update accordingly. - debian/.install: Move files accordingly - debian/.{postinst,postrm,preinst}: Move files accordingly. * Ensure isc-dhcp-server is disabled when installing maas-dhcp. * Ensure maas-dns creates the maas user before trying to chown files. * Make maas-cluster-controller autoconfigure itself when upgrading from the old maas package. (LP: #1059416) * Add missing prerm file for maas-cluster-controller so that .pyc files are cleaned up. (LP: #1059973) [ Raphaël Badin ] * Install maas_local_celeryconfig.py in /etc/maas and symlink to /usr/share/maas. * debian/maas.postinst: Create rabbitmq celery user/vhost. * debian/maas.postinst: Update BROKER_URL in maas_local_celeryconfig.py. * Use maas_local_celeryconfig_cluster.py as the local celery configuration file for the cluster worker. * debian/maas-region-controller.maas-region-celery.upstart: Add region worker upstart script. * Rename cluster worker upstart script into maas-cluster-controller.maas-clluster-celery.upstart. * maas-cluster-controller.maas-celery.upstart: use "celeryconfig_cluster" as the Celery config module. * debian/maas-common.install: Install celeryconfig_common.py. * debian/maas-cluster-controller.install: Install celeryconfig_cluster.py. * debian/maas-region-controller.install: Install celeryconfig.py. * Split celery config into cluster and region configs. * Add region celeryd upstart config. * Define CELERY_CONFIG_MODULE in maas-cluster-controller.maas-cluster-celery.upstart [ Jeroen Vermeulen ] * Make maas_local_celery_config.py non-world readable. * Make maas_local_celeryconfig_cluster.py non-world readable. * Set root:maas ownership of local cluster config only after the maas user/group have been created [ Andres Rodriguez ] * debian/maas.postinst: - Always restart apache2. - Handle upgrades for new upstream release. - Handle upgrades for celery rabbitmq worker. * Add binary package to install client tool. - debian/extras/maas-cli: Add binary. - debian/maas-cli.install: Add. Install maascli and apiclient. - debian/control: Add binary package. * debian/control: - Depends on freeipmi-tools instead of ipmitool. - Conflicts/Replaces on maas for python-maas-client. - Depends on python-netifaces, python-lxml. * Add python-maas-client binary package: - debian/python-maas-client.install: Add. Install 'apiclient' python module. - debian/control: Add package. python-django-maas and maas-cli now Depend on it. * debian/rules: Install maas-dhcp-server upstart job. * debian/maas.postrm: Remove celery worker rabbitmq user and host. * debian/extras/99-maas-sudoers: Add for maas-dhcp-server upstart job instead of isc-dhcp-server (LP: #1055951) * debian/maas-region-controller.postinst: Cleanup upgrade rules. * debian/maas-cluster-controller.postinst: Fix 'local' usage. * debian/maas-common.install: Install celeryconfig in appropriate location. * debian/maas-cluster-controller.postrm: Add and delete maas user. * debian/maas-dhcp.postinst: Stop isc-dhcp-server not isc_dhcp_server. * debian/maas-region-controller.postinst: - Always update passwords on upgrade. No longer check versioning. (LP: #1060094). - Add MAAS server to allowed mirror in squid-deb-proxy - Source dbconfig conf file for maas-region-controller on upgrade because it writes a new config file and no longer preservers the previous password. * debian/maas-cluster-controller.maas-cluster-celery.upstart: Remove set{uid/gid}. * debian/maas-region-controller.install: Install maas-import-squashfs * Handle removal of non existant files (LP: #1059556): - debian/maintscript: Added to handle removal of conffiles. - debian/control: Add Pre-depends and bump debhelper version. * update po files for the templates. * debian/extras/99-maas: Install in usr/share/maas/conf and symlink to the appropriate etc dir. * debian/maas-cluster-controller.config: Source debconf at the beginning of the script. (LP: #1063857) * debian/patches/99-temporary-fix-constraints.patch: Fix constraints maaping when deploying with juju. Temporary until it gets merged upstream [ Robie Basak ] * Add maas-cluster-controller dependency on uuid-runtime, needed for uuidgen by postinst. [ Scott Moser ] * debian/maas-dhcp.{install,apparmor,postrm} install apparmor profile into /etc/apparmor.d/dhcpd.d (LP: #1049177), and update apparmor profile for /usr/sbin/dhcpd on install/remove * get the ip address for the dhcp server in config [ Diogo Matsubara ] * Add initial tests to be run by autotests: - debian/control: XS-Testsuite: autopkgtest - debian/tests/control: Add - debian/tests/maas-package-test: Add - tests/maas-integration.py: Add	Andres Rodriguez	0.1+bzr1223+dfsg-0ubuntu1	11 years ago
22	debian/extras/99-maas-sudoers: Add missing rule for debian/extras/99-maas-sudoers: Add missing rule for maas-provision. (LP: #1046397)	Andres Rodriguez	0.1+bzr971+dfsg-0ubuntu2	11 years ago
21	* New upstream release (LP: #1044367) * New upstream release (LP: #1044367) [ Julian Edwards ] * Fix 02-pserv-config.patch to handle new default tftp directory [ Andres Rodriguez ] * debian/maas.postinst: - include '/MAAS' for DEFAULT_MAAS_URL.(LP: #1033956) - Update bzr version to safely upgrade. * Add maas-dns package that configures DNS in MAAS (LP: #1030860) * Remove cobbler related bits - debian/maas.postinst: Drop cobbler configuration - debian/maas.install: Drop installation of snippets/preseeds. - debian/control: + Drop Depends on maas-provision. (LP: #975473) + Depends on bind9utils. + Depends on python-lockfile (LP: #1037400) Add necessary Conflicts/Replaces. Add conflicts to tftpd-hpa and dnsmasq. Depends on isc-dhcp-server for maas-dhcp, and syslinux-common. - debian/extras/maas-provision: Add missing "$@" (LP: #1040462) - debian/patches: + 02-pserv-config.patch: Updated. Do not patch cobbler related bits. patch tftp config to default. * maas-dhcp: Re-add to handle initial configuration of MAAS DHCP server. * Allow restart of 'isc-dhcp-server' by adding a sudoers file: - debian/extras/99-maas-sudoers: Added. - debian/maas.install: Install 99-maas-sudoers * Minor improvements on dbconfig-common handling: - debian/maas.config: Only call dbc_go when scripts present. - debian/maas.postrm: Only call dbc_go when config file exists. * debian/maas.maas-celery.upstart: Enable Beat and set scheduler db file. * debian/maas-dns.postinst: Set correct permissions. (LP: #1042868) * debian/maas-dhcp.config: - Ask whether we want to enable DHCP (LP: #1044229) - Add debconf question for network interfaces * debian/maas.prerm: Stop services before removing database (LP: #1044559)	Andres Rodriguez	0.1+bzr971+dfsg-0ubuntu1	11 years ago
20	* New upstream release * New upstream release * Only run 'maas' command as root. (LP: #974046) - debian/extras/maas: Check id. - debian/maas.install: Install in 'sbin'. * debian/maas.postinst: - restart apache2 after everything gets processed. - Update version to handle upgrades. * debian/extras/maas-provision: Add wrapper to access 'maasprovisiong' command line. * debian/patches/99_temporary_fix_path.patch: Dropped. No longer needed.	Andres Rodriguez	0.1+bzr777+dfsg-0ubuntu1	11 years ago
19	debian/control: Build-Dep on python-django instead of debian/control: Build-Dep on python-django instead of python-django-configglue	Andres Rodriguez	0.1+bzr745+dfsg-0ubuntu2	11 years ago
18	* New Upstream Release * New Upstream Release * debian/patches: - 99_power_fixes.patch: Dropped. Merged Upstream. - 99_enums_js.patch: Dropped. No longer needed. * Automatically build enums.js: - debian/control: Build-Depends on python-django-configglue - debian/rules: Build and install enums.js. * debian/maas.postinst: Update version to handle upgrades	Andres Rodriguez	0.1+bzr745+dfsg-0ubuntu1	11 years ago
17	* New upstream release * New upstream release * debian/control: Depends on python-txtftp. * debian/rules: Do not ship python-tx-tftp. * debian/maas.postinst: Update version to upgrade successfully. * debian/patches: - 02-pserv-config.patch: Refreshed. - 99_enums_js.patch: Updated. - 99_power_fixes.patch: Added temporarily to enable IPMI - 99_temporary_fix_path.patch: Added temporarily to not fail when importing celeryconfig	Andres Rodriguez	0.1+bzr740+dfsg-0ubuntu1	11 years ago
16	* New Upstream release * New Upstream release * debian/control: - Depends on python-celery, python-tempita, libjs-yui3-{full,min}, libjs-raphael * debian/maas.install: - Install apiclient, celeryconfig.py, maas-import-pxe-files, preseeds_v2. - Update to install various files from chroot, rather tha manually copy them from the source. * debian/maas.links: symlink celeryconfig.py * debian/maas.maas-celery.upstart: Add job. * debian/rules: - Install celery upstart job. - Do not install jslibs as packages are now used. - Drop copying of maas_local_settings_sample.py as source now ships a maas_local_settings.py * debian/patches: - 04-maas-http-fix.patch: Drop. Merged upstream. - 01-fix-database-settings.patch: Refreshed. - 99_enums_js.patch: Added until creation of enum.js / build process is fixed. * debian/maas.postinst: Update bzr version to correctly handle upgrades.	Andres Rodriguez	0.1+bzr709+dfsg-0ubuntu1	11 years ago
15	* New upstream release (Fixes LP: #981103) * New upstream release (Fixes LP: #981103) * debian/maas.postinst: - Make sure rabbitmq and postgresql are started on upgrade (LP: #981282) - Handle upgrades from any lower than 0.1+bzr462+dfsg-0ubuntu1 to correctly re-generate passwords, and not have db sync/migrate issues as config has changed upstream. - Correctly set Passwords for PSERV, otherwise it won't set new passwords. * Allow MAAS_DEFAULT_URL reconfiguration. (LP: #980970) - debian/maas.config: Add reconfigure validation to correctly allow it, and ask a question. - debian/maas.postinst: Reconfigure DEFAULT_MAAS_URL as well as cobbler server and next_server for PXE/Provisioning. - debian/maas.templates: Add debconf question and update info. * Do not lose MAAS_DEFAULT_URL settings on upgrade (LP: #984309) * debian/maas.postinst: - Set cobbler password in between quotes (LP: #984427) - Do not change permissions to maas.log (LP: #980915) * no longer use maas-cloudimg2ephemeral, but rather use premade images at http://maas.ubuntu.com	Andres Rodriguez	0.1+bzr482+dfsg-0ubuntu1	12 years ago
14	* New upstream release (LP: #980240) * New upstream release (LP: #980240) [ Scott Moser ] * add dependency on distro-info (LP: #949442) * debian/control: add dependency on tgt for ephemeral iscsi environment [ Andres Rodriguez ] * Make package lintian clean: - maas{-dhcp}.lintian-overrides: Add to make lintian clean. - debian/control: Add missing dependencies; correct section and desc. - debian/maas.postinst: Do not use absolute path for rabbitmqctl. - debian/patches: Add headers to all patches. * debian/maas-dhcp.postrm: Added to disable dnsmasq in cobbler on removal. * debian/maas.config: Do not set a password with pwgen as it is not an essential package; allow dbconfig-common to create a password instead by creating an empty question. (LP: #977475) * Run MAAS, pserv, txlongpoll as non-root user. (LP: #975436) - debian/maas.postinst: Create user/group; set correct permissions for directories. - debian/maas.postrm: Remove user/group; restart apache2. - debian/maas.maas-{pserv,txlongpoll}.upstart: Update to run as non-root 'maas' user. * debian/patches/01-fix-database-settings.patch: Remove adding of PSERV_URL. * debian/maas.postinst: - Handle config file upgrade from versions lower than 0.1+bzr445+dfsg-0ubuntu1, by creating new passwords and updating accordingly - use local variables in functions. - Handle maas tgt configuration for upgrades from 0.1+bzr459+dfsg-0ubuntu1. * debian/extras/99-maas: Add squid-deb-proxy file to enable PPAs. (LP: #979383) * debian/maas.install: Install missing commissioning-user-data script. [ Dave Walker (Daviey) ] * debian/patches/02-pserv-config.patch: Refreshed to apply to updated config. [ Gavin Panella ] * debian/maas.postinst: Update pserv.yaml and maas_local_settings.py to use password.	Andres Rodriguez	0.1+bzr462+dfsg-0ubuntu1	12 years ago
13	* debian/maas-dhcp.{config,postinst}: * debian/maas-dhcp.{config,postinst}: - Fix not setting new values on fresh install. (LP: #975321) - Fix unsetting domain, otherwise, even if disabled, it will always be set. * debian/control: Depends on maas for maas-dhcp.	Andres Rodriguez	0.1+bzr415+dfsg-0ubuntu2	12 years ago
12	* debian/control: Update package descriptions; Suggests maas... * debian/control: Update package descriptions; Suggests maas-dhcp for maas and add a maas-dhcp binary. * Add maas-dhcp package to configure a DHCP server. - debian/maas-dhcp.config: Add to ask debconf questions about range, gateway, and domain. - debian/maas-dhcp.postinst: Handle update of config values. - debian/maas-dhcp.templates: Debconf questions. * debian/po: Update for templates. * Add message telling MAAS URL after installation. - debian/maas.templates: Add message. - debian/maas.postinst: Display message. * debian/maas.config: Hide dbconfig-install question.	Andres Rodriguez	0.1+bzr415+dfsg-0ubuntu1	12 years ago
11	* debian/patches/{02-pserv-config,03-txlongpoll-config}.patc... * debian/patches/{02-pserv-config,03-txlongpoll-config}.patch: Refreshed. * debian/maas.install: Install maas-gc cronjob. * Add apport hook. - debian/maas.apport: Add hook. - debian/rules: Install with apport. * debian/maas.logrotate: Add logrotate for txlongpoll and pserv logs. * Create 'var/lib/media/maas/storage' on postinst to have right permissions. - debian/maas.dirs: Drop dir creation. - debian/maas.postinst: Create dir with correct permissions. - debian/maas.postrm: Remove dir on purge.	Andres Rodriguez	0.1+bzr400+dfsg-0ubuntu1	12 years ago

Older »