Viewing all changes in revision 24.
- Committer: Package Import Robot
- Date: 2014-02-11 12:07:50 UTC
- mfrom: (20.1.10 quantal-security)
- Revision ID: package-import@ubuntu.com-20140211120750-crd9fyy8a751aqxn
* SECURITY UPDATE: incorrect Content-type header allowed cross-site
scripting vulnerability if an unknown API was used. (LP: #1251336)
- debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
browsers to not render error messages as HTML.
- CVE-2013-1070
* SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
password. (LP: #1254034)
- debian/maas-region-controller.postinst: chown and chmod
/etc/maas/txlongpoll.yaml with correct permissions
- CVE-2013-1069
scripting vulnerability if an unknown API was used. (LP: #1251336)
- debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
browsers to not render error messages as HTML.
- CVE-2013-1070
* SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
password. (LP: #1254034)
- debian/maas-region-controller.postinst: chown and chmod
/etc/maas/txlongpoll.yaml with correct permissions
- CVE-2013-1069
- files added:
- .pc/CVE-2013-1070.patch
- .pc/CVE-2013-1070.patch/src
- .pc/CVE-2013-1070.patch/src/maasserver
- .pc/CVE-2013-1070.patch/src/maasserver/tests
- .pc/CVE-2013-1070.patch/src/maasserver/views
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
