-
Committer:
Package Import Robot
-
Author(s):
Seth Arnold
-
Date:
2014-02-11 12:16:40 UTC
-
mfrom:
(41.1.1 saucy-proposed)
-
Revision ID:
package-import@ubuntu.com-20140211121640-rei4q1rhu6mhx6aw
Tags: 1.4+bzr1693+dfsg-0ubuntu2.3
* SECURITY UPDATE: incorrect Content-type header allowed cross-site
scripting vulnerability if an unknown API was used. (LP: #1251336)
- debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
browsers to not render error messages as HTML.
- CVE-2013-1070
* SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
password. (LP: #1254034)
- debian/maas-region-controller-min.postinst: chown and chmod
/etc/maas/txlongpoll.yaml with correct permissions
- CVE-2013-1069