lp:ubuntu/natty-security/nova

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

25. By Tyler Hicks on 2012-03-29

* SECURITY UPDATE: Denial of service via resource exhaustion in nova-api
  - debian/patches/validate_server_name_length.patch: Limit server names
    to a maximum of 255 characters to prevent nova-api log files from
    exhausting storage space. Based on upstream patch.
  - CVE-2012-1585

24. By Jamie Strandboge on 2011-12-09

* SECURITY UPDATE: fix directory traversal during image registration via
  EC2 API and S3/RegisterImage
  - fix-traversal-via-image-register.patch: adjust nova/image/s3.py to
    use basename instead of absolute path
  - CVE-2011-XXXX

23. By Jamie Strandboge on 2011-10-25

* SECURITY UPDATE: fix information leak via invalid key
  debina/patches/security-fix-lp868360.patch: adjust nova/auth/manager.py
  to not return access, secret or admin fields for User error and
  project_manager_id, description and member_ids for Project
  - LP: #868360
  - CVE-2011-XXXX

22. By Chuck Short on 2011-04-15

New upstream release.

21. By Chuck Short on 2011-04-08

[Chuck Short]
* New upstream release.
* debian/nova-doc.docs: Adjust directory to the right docs path.

[Soren Hansen]
* Refresh nova-manage-flags patch.
* Adjust call to ajaxterm to work with the packaged ajaxterm instead
  of the one we ship in the tarball.
* Remove all traces of the adminclient package. It moved to its own
  tarball. There are no known consumers, so this should not be a
  problem.
* Remove build-dependency on python-suds again.
* setup.py now takes care of installing the CA code, so yank those
  bits from debian/nova-common.install.
* setup.py now places api-paste.ini correctly, so stop working around
  it.

20. By Chuck Short on 2011-03-31

[Chuck Short]
* New upstream release.

[Soren Hansen]
* Make the build fail if the test suite does. The test that used to
  fail on the buildd's has been complete rewritten. (LP: #712481)
* Specify that we need Sphinx > 1.0 to build.
* Remove refresh_bzr_branches target from debian/rules. It is not used
  anymore.
* Clean up after doc builds on debian/rules clean.
* Add a nova-ajax-console-proxy package.
* Add Recommends: ajaxterm to nova-compute, so that nova-ajax-console-
  proxy will have something to connect to.
* Stop depending on aoetools. iscsi is the default nowadays (and has
  been for a while).
* Move dependency on open-iscsi from nova-volume to nova-compute.
  They're client tools, so that's where they belong.
* Add a build-depends on python-suds.
* Add logrote config for nova-ajax-console-proxy.
* Add upstart job for nova-ajax-console-proxy.

19. By Chuck Short on 2011-03-18

* New upstream version.
* debian/control: Add python-lockfile as a build dependency.

18. By Chuck Short on 2011-03-11

[Chuck Short]
* New upstream version.

[ Thierry Carrez (ttx) ]
* nova-api.conf was renamed api-paste.ini (LP: #705453)

[ Soren Hansen ]
* Start on filesystem event rather than local-filesystems.
* Weed out a *lot* of out-dated information from debian/control.
* Create /var/lock/nova in upstart jobs and set lock_path in the
  flagfile.
* Add dependency on python-novaclient.

17. By Chuck Short on 2011-03-04

[Chuck Short]
* New upstream version.
* Fix up typos in debian/control. (LP: #721414)

[ Thierry Carrez (ttx) ]
* Add python-distutils-extra as build-dep (for i18n)
* Ship .mo files in /usr/share/locale
* Add lvdisplay to nova_sudoers, clean up dupe entries

[ Soren Hansen ]
* Always run "nova-manage db sync" from postinst, unless an explicit
  sql_connection has been set in nova.conf. (LP: #705758)

16. By LaMont Jones on 2011-02-26

rebuild for permissions issue