stable/xena : lp:~corey.bryant/ubuntu/+source/barbican : Git : Code : barbican package : Ubuntu

Get this branch:: git clone -b stable/xena https://git.launchpad.net/~corey.bryant/ubuntu/+source/barbican

Only Corey Bryant can upload to this branch. If you are Corey Bryant please log in for upload directions.

Branch merges

Merged into ~ubuntu-openstack-dev/ubuntu/+source/barbican:stable/xena at revision 1e55d6f358d27a88880e794d4f4091f73b008146

Ubuntu OpenStack uploaders: Pending requested 2022-12-05

Branch information

Name:: stable/xena

Repository:: lp:~corey.bryant/ubuntu/+source/barbican

Recent commits

1e55d6f... by Corey Bryant on 2022-12-05

releasing package barbican version 2:13.0.2-0ubuntu1~cloud0

63588de... by Corey Bryant on 2022-12-05

New stable point release for OpenStack Xena (LP: #1998549).

5891cdf... by Corey Bryant on 2022-12-05

d/p/CVE*: Dropped. Fixed in new upstream release.

36f5e82... by Corey Bryant on 2022-12-05

New update for the Ubuntu Cloud Archive.

* New update for the Ubuntu Cloud Archive.
* SECURITY UPDATE: Access restrictions bypass
  - debian/patches/CVE-2022-23451-1.patch: Change access policies to
    secret metadata in barbican/common/policies/secretmeta.py. Add a new
    role in barbican/common/policies/base.py and make use of these changes
    in barbican/api/controllers/__init__.py,
    barbican/api/controllers/secretmeta.py and
    barbican/api/controllers/secrets.py.
  - debian/patches/CVE-2022-23451-2.patch: Fix secure RBAC rules in
    barbican/common/policies/secretmeta.py
  - debian/patches/CVE-2022-23451-post1.patch: Change consumer controller
    code in barbican/api/controllers/*, change policy rules in
    barbican/common/policies/consumers.py and add tests in
    barbican/tests/api/test_resources_policy.py and
    functionaltests/api/v1/functional/test_acls.py.
  - debian/patches/CVE-2022-23451-post2.patch: Change secret policies in
    barbican/common/policies/secrets.py, add tests in
    barbican/tests/api/test_resources_policy.py and
    functionaltests/api/v1/functional/test_secrets_rbac.py and update
    api guide in api-guide/source/acls.rst.
  - CVE-2022-23451
* SECURITY UPDATE: Ownership bypass
  - debian/patches/CVE-2022-23452.patch: Update container secret policies
    in barbican/common/policies/containers.py and add a new role in
    barbican/common/policies/base.py.
  - CVE-2022-23452

29d77ab... by Corey Bryant on 2022-12-02