OpenStack Identity (keystone)

lp:~james-page/keystone/folsom-resync

Created by James Page on 2013-03-22 and last modified on 2013-03-22

Only James Page can upload to this branch. If you are James Page please log in for upload directions.

No branches dependent on this one.

Openstack Ubuntu Testers: Pending requested 2013-03-22

Medium

Invalid

162. By James Page on 2013-03-22: Mark tip UNRELEASED
161. By James Page on 2013-03-22: * Resync with latest security updates.
* SECURITY UPDATE: fix PKI revocation bypass
  - debian/patches/CVE-2013-1865.patch: validate tokens from the backend
  - CVE-2013-1865
* SECURITY UPDATE: fix EC2-style authentication for disabled users
  - debian/patches/CVE-2013-0282.patch: adjust keystone/contrib/ec2/core.py
    to ensure user and tenant are enabled in EC2
  - CVE-2013-0282
* SECURITY UPDATE: fix denial of service
  - debian/patches/CVE-2013-1664+1665.patch: disable XML entity parsing
  - CVE-2013-1664
  - CVE-2013-1665
* SECURITY UPDATE: fix PKI revocation bypass
  - debian/patches/CVE-2013-1865.patch: validate tokens from the backend
  - CVE-2013-1865
  - LP: #1129713
160. By Adam Gandelman on 2013-02-21: 2012.2.3+stable-20130220-37b35328-0ubuntu1
159. By Adam Gandelman on 2013-02-06: 2012.2.3
158. By Adam Gandelman on 2013-02-05: 2012.2.3
157. By Adam Gandelman on 2013-02-05: Update changelog.
156. By Chuck Short on 2013-01-23: debian/patches/fix-ubuntu-tests.patch: Rediffed
155. By Adam Gandelman on 2012-12-03: Merge 2012.2.1 changes.
154. By Adam Gandelman on 2012-10-31: Update changelog format to cater to stable/folsom git entries.
153. By Adam Gandelman on 2012-10-31: debian/control: Ensure keystoneclient is upgraded with keystone,
require python-keystoneclient >= 1:0.1.3. (LP: #1073273)

This branch contains Public information

Everyone can see this information.