ubuntu/+source/keystone:applied/debian/wheezy

Last commit made on 2013-06-14
Get this branch:
git clone -b applied/debian/wheezy https://git.launchpad.net/ubuntu/+source/keystone
Members of git-ubuntu import can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/debian/wheezy
Repository:
lp:ubuntu/+source/keystone

Recent commits

1ccfd03... by Thomas Goirand <email address hidden>

2012.1.1-13+wheezy1 (patches applied)

Imported using git-ubuntu import.

db91d3e... by Thomas Goirand <email address hidden>

CVE-2013-2059 Revoke tokens on user delete

Gbp-Pq: CVE-2013-2059_essex_Deleted_user_can_still_create_instances.patch.

eb4f54e... by Thomas Goirand <email address hidden>

Ignore XML entities

Gbp-Pq: CVE-2013-1664_CVE-2013-1665_Information-leak-and-Denial-of-Service-using-XML-entities.patch.

f41b4cb... by Thomas Goirand <email address hidden>

CVE-2013-0282 Keystone EC2-style authentication accepts disabled user/tenants

Gbp-Pq: CVE-2013-0282_ensure-user-tenant-enabled-ec2.patch.

a89c592... by Thomas Goirand <email address hidden>

CVE-2013-0247: Keystone denial of service through invalid token requests

Gbp-Pq: CVE-2013-0247_denial_of_service_through_invalid_token_requests.patch.

6cc8366... by Thomas Goirand <email address hidden>

Ensures User is member of tenant in ec2 validation

Gbp-Pq: ensures-User-is-member-of-tenant-in-ec2-validation.patch.

ccb1fe2... by Thomas Goirand <email address hidden>

Raise unauthorized if tenant disabled

Gbp-Pq: CVE-2012-4457-Raise_unauthorized_if_tenant_disabled.patch.

07e8d97... by Thomas Goirand <email address hidden>

Require authz for user role list

Gbp-Pq: CVE-2012-4456-Some_actions_in_Keystone_admin_API_do_not_validate_token.patch.

64cbc42... by Thomas Goirand <email address hidden>

CVE-2012-4413: Revoking a role does not affect existing tokens

Gbp-Pq: CVE-2012-4413_Revoking-a-role-does-not-affect-existing-tokens.patch.

07a906f... by Thomas Goirand <email address hidden>

Lack of authorization for adding users to tenants

Gbp-Pq: CVE-2012-3542_Lack-of-authorization-for-adding-users-to-tenants.patch.