lp:ubuntu/trusty-security/simplestreams

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Scott Moser on 2015-09-25

export checksummer in simplestreams.util (LP: #1499749)
Users of simplestreams.util checksummer would get an AttributeError
because this was moved.

16. By Scott Moser on 2015-09-22

* SECURITY UPDATE: insufficient verification of GPG signatures
  allowing malicious injection into images
  - debian/patches/lp1487004-use-checksumming-reader.patch: Ensure
    that users of the BasicMirrorWriter get exceptions when importing
    data that has invalid checksum or sizes. (LP: #1487004)
  - CVE-2015-1337
  - debian/patches/lp1487004-sru-safetynet.patch:
    provide a backwards compatible behavior via setting
    SS_MISSING_ITEM_CHECKSUM_BEHAVIOR=silent. See bug for more info.

15. By Scott Moser on 2014-03-26

* New upstream snapshot.
  * sstream-mirror: dry-run support
  * sstream-mirror: support for mirroring streams that re-use
    a path across items (such as maas ephemerals)
  * sstream-mirror: show gpg error message on gpg verification
* debian/control: add build-depends on python-nose and python-yaml
  for running python 2 tests.

14. By Scott Moser on 2014-03-18

* New upstream snapshot.
  * support writing sparse files in FileStore
  * stringitems: make ints and floats available as strings
  * resolvwork: enforce that max and keep must be integers
  * load_keystone_creds: documentation
  * fix bug with contentsource (LP: #1241711)

13. By Matthias Klose on 2014-02-23

Rebuild to drop files installed into /usr/share/pyshared.

12. By Scott Moser on 2013-10-22

* New upstream snapshot.
  * fix bug with sstream-sync (LP: #1241711)
  * fix bug in glance mirror (LP: #1243433)
  * fix odd behavior bug when filtering. The result was that if you
    had ever run with a filter, subsequent runs with modified filter
    would not see different results (LP: #1238227).

11. By Scott Moser on 2013-10-15

* New upstream snapshot.
  * fix odd behavior bug when filtering. The result was that if you
    had ever run with a filter, subsequent runs with modified filter
    would not see different results (LP: #1238227).

10. By Scott Moser on 2013-10-10

* New upstream snapshot.
  * fix bug in resuming a partial download in sstream-mirror
    or anything using the FileObjectStore (LP: #1237990)

9. By Scott Moser on 2013-10-09

* New upstream snapshot.
  * fix interpreter written on sstream-sync, sstream-query and
    sstream-mirror. It should be python3, not python2.7. (LP: #1237637)
  * simplestreams/mirrors/__init__.py: fix bug causing resumed downloads
    to stack trace (LP: #1237658)

8. By Scott Moser on 2013-09-30

* New upstream snapshot.
  * handle sigpipe gracefully (LP: #1207779)
  * as user-friendly cleanup add a trailing '/' to a url if necessary
  * add --delete flag to sstream-sync
  * add python-simplestreams-openstack metapackage so other packages
    could depend on this, but the python-simplestreams package will
    not incur those dependencies. (LP: #1233269)
  * debian/control: Suggest rather than Depend on python-requests.
    Also, up the version to the actual required version (1.1).