lp://staging/~openstack-ubuntu-testing/keystone/folsom

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1129713: [OSSA 2013-009] Validation of PKI tokens bypasses revocation check

Medium

Invalid

Link a bug report

Related blueprints

170. By Adam Gandelman on 2013-05-23

* Dropped patches, applied upstream:
  - debian/patches/CVE-2013-2059.patch: [992466d]

169. By Adam Gandelman on 2013-05-17

Add missing CVE-2013-2059.patch.

168. By James Page on 2013-05-17

Re-sync changelog with latest security updates

167. By Adam Gandelman on 2013-05-13

Add meta-bug ref.

166. By Adam Gandelman on 2013-05-13

Fix release.

165. By Adam Gandelman on 2013-05-13

Drop patch as per changelog history.

164. By Adam Gandelman on 2013-05-13

Fix distro release name.

163. By Adam Gandelman on 2013-05-13

Releasing 2012.2.4-0ubuntu1.

Merged branch lp://staging/~gandelman-a/ubuntu/quantal/keystone/2012.2.4

162. By Adam Gandelman on 2013-04-23

Resync changelog with current package in quantal-proposed.

161. By James Page on 2013-03-22

* Resync with latest security updates.
* SECURITY UPDATE: fix PKI revocation bypass
  - debian/patches/CVE-2013-1865.patch: validate tokens from the backend
  - CVE-2013-1865
* SECURITY UPDATE: fix EC2-style authentication for disabled users
  - debian/patches/CVE-2013-0282.patch: adjust keystone/contrib/ec2/core.py
    to ensure user and tenant are enabled in EC2
  - CVE-2013-0282
* SECURITY UPDATE: fix denial of service
  - debian/patches/CVE-2013-1664+1665.patch: disable XML entity parsing
  - CVE-2013-1664
  - CVE-2013-1665
* SECURITY UPDATE: fix PKI revocation bypass
  - debian/patches/CVE-2013-1865.patch: validate tokens from the backend
  - CVE-2013-1865
  - LP: #1129713

Merged branch lp://staging/~james-page/keystone/folsom-resync

Bug #1129713: [OSSA 2013-009] Validation of PKI tokens bypasses revocation check