-
nova (2011.2-0ubuntu1.3) natty-security; urgency=low
* SECURITY UPDATE: Denial of service via resource exhaustion in nova-api
- debian/patches/validate_server_name_length.patch: Limit server names
to a maximum of 255 characters to prevent nova-api log files from
exhausting storage space. Based on upstream patch.
- CVE-2012-1585
-- Tyler Hicks <email address hidden> Thu, 29 Mar 2012 01:13:25 -0500
-
nova (2011.2-0ubuntu1.2) natty-security; urgency=low
* SECURITY UPDATE: fix directory traversal during image registration via
EC2 API and S3/RegisterImage
- fix-traversal-via-image-register.patch: adjust nova/image/s3.py to
use basename instead of absolute path
- CVE-2011-XXXX
-- Jamie Strandboge <email address hidden> Fri, 09 Dec 2011 06:55:10 -0600
-
nova (2011.2-0ubuntu1.1) natty-security; urgency=low
* SECURITY UPDATE: fix information leak via invalid key
debina/patches/security-fix-lp868360.patch: adjust nova/auth/manager.py
to not return access, secret or admin fields for User error and
project_manager_id, description and member_ids for Project
- LP: #868360
- CVE-2011-XXXX
-- Jamie Strandboge <email address hidden> Tue, 25 Oct 2011 09:04:51 -0500
-
nova (2011.2-0ubuntu1) natty; urgency=low
* New upstream release.
-- Chuck Short <email address hidden> Fri, 15 Apr 2011 07:14:43 -0400
-
nova (2011.2~gamma1-0ubuntu1) natty; urgency=low
[Chuck Short]
* New upstream release.
* debian/nova-doc.docs: Adjust directory to the right docs path.
[Soren Hansen]
* Refresh nova-manage-flags patch.
* Adjust call to ajaxterm to work with the packaged ajaxterm instead
of the one we ship in the tarball.
* Remove all traces of the adminclient package. It moved to its own
tarball. There are no known consumers, so this should not be a
problem.
* Remove build-dependency on python-suds again.
* setup.py now takes care of installing the CA code, so yank those
bits from debian/nova-common.install.
* setup.py now places api-paste.ini correctly, so stop working around
it.
-- Chuck Short <email address hidden> Fri, 08 Apr 2011 10:49:10 -0400
-
nova (2011.2~bzr925-0ubuntu1) natty; urgency=low
[Chuck Short]
* New upstream release.
[Soren Hansen]
* Make the build fail if the test suite does. The test that used to
fail on the buildd's has been complete rewritten. (LP: #712481)
* Specify that we need Sphinx > 1.0 to build.
* Remove refresh_bzr_branches target from debian/rules. It is not used
anymore.
* Clean up after doc builds on debian/rules clean.
* Add a nova-ajax-console-proxy package.
* Add Recommends: ajaxterm to nova-compute, so that nova-ajax-console-
proxy will have something to connect to.
* Stop depending on aoetools. iscsi is the default nowadays (and has
been for a while).
* Move dependency on open-iscsi from nova-volume to nova-compute.
They're client tools, so that's where they belong.
* Add a build-depends on python-suds.
* Add logrote config for nova-ajax-console-proxy.
* Add upstart job for nova-ajax-console-proxy.
-- Chuck Short <email address hidden> Thu, 31 Mar 2011 11:25:10 -0400
-
nova (2011.2~bzr828-0ubuntu1) natty; urgency=low
* New upstream version.
* debian/control: Add python-lockfile as a build dependency.
-- Chuck Short <email address hidden> Fri, 18 Mar 2011 09:28:17 -0400
-
nova (2011.2~bzr786-0ubuntu1) natty; urgency=low
[Chuck Short]
* New upstream version.
[ Thierry Carrez (ttx) ]
* nova-api.conf was renamed api-paste.ini (LP: #705453)
[ Soren Hansen ]
* Start on filesystem event rather than local-filesystems.
* Weed out a *lot* of out-dated information from debian/control.
* Create /var/lock/nova in upstart jobs and set lock_path in the
flagfile.
* Add dependency on python-novaclient.
-- Chuck Short <email address hidden> Fri, 11 Mar 2011 09:41:45 -0500
-
nova (2011.2~bzr760-0ubuntu1) natty; urgency=low
[Chuck Short]
* New upstream version.
* Fix up typos in debian/control. (LP: #721414)
[ Thierry Carrez (ttx) ]
* Add python-distutils-extra as build-dep (for i18n)
* Ship .mo files in /usr/share/locale
* Add lvdisplay to nova_sudoers, clean up dupe entries
[ Soren Hansen ]
* Always run "nova-manage db sync" from postinst, unless an explicit
sql_connection has been set in nova.conf. (LP: #705758)
-- Chuck Short <email address hidden> Fri, 04 Mar 2011 10:19:52 -0500
-
nova (2011.2~bzr740-0ubuntu2) natty; urgency=low
* rebuild for permissions issue
-- LaMont Jones <email address hidden> Sat, 26 Feb 2011 00:44:28 +0000
-
nova (2011.2~bzr740-0ubuntu1) natty; urgency=low
[Chuck Short]
* New upstream release.
[Thierry Carrez]
* Add python-distutils-extra as build-dep (for i18n)
* Ship .mo files in /usr/share/locale
* Add lvdisplay to nova_sudoers, clean up dupe entries
-- Chuck Short <email address hidden> Fri, 25 Feb 2011 14:01:06 -0500
-
nova (2011.2~bzr700-0ubuntu1) natty; urgency=low
[ Chuck Short ]
* New upstream version.
[ Soren Hansen ]
* Rely on --logdir to find and use the correct logfile.
* Remove the postrotate magic for all but nova-objectstore. It is not
needed anymore due to using RotatingFileHandler for logging.
[ Thierry Carrez ]
* Ship adminclient in a separate package.
-- Chuck Short <email address hidden> Fri, 18 Feb 2011 09:36:22 -0500
-
nova (2011.2~bzr663-0ubuntu1) natty; urgency=low
[ Chuck Short ]
* New upstream verison.
* Add python-paramiko to debian/control.
[Soren Hansen]
* Honour nocheck and nodocs in DEB_BUILD_OPTIONS.
* Add /sbin/route to sudoers file.
-- Chuck Short <email address hidden> Fri, 11 Feb 2011 10:27:54 -0500
-
nova (2011.1-0ubuntu2) natty; urgency=low
* Dont fail unittest because of buildd problems.
-- Chuck Short <email address hidden> Thu, 03 Feb 2011 07:26:54 -0500
-
nova (2011.1-0ubuntu1) natty; urgency=low
* New upstream release.
* Add recommends to python-mysqldb (LP: #708511)
* Add dependency of iscsitarget to nova-volume and a sugestion to use
sheepdog (LP: #708141)
* Suggest radvd for those who want to try ipv6.
-- Chuck Short <email address hidden> Thu, 03 Feb 2011 07:00:52 -0500
-
nova (2011.1~bzr638-0ubuntu1) natty; urgency=low
* New upstream snapshot.
-- Chuck Short <email address hidden> Fri, 28 Jan 2011 13:41:00 -0500
-
nova (2011.1~bzr597-0ubuntu1) natty; urgency=low
[ Chuck Short ]
* New upstream snapshot.
* Add socat, iscsiadm, and vgs to nova_sudoers.
* Add aoetools, open-iscsi to dependencies for nova-volume.
* Add socat to dependencies for nova-network.
* Add python-paste and python-pastedeploy as build dependency.
* Add python-tempita and python-migrate as build dependency.
[ Soren Hansen ]
* Add dependency on sudo.
* Add upstart jobs for everything.
* Adjust test run for nosetests newness.
* Quiet nova-compute's postinst script.
* Change the dependency on sqlalchemy to ensure the C extension gets
installed for versions of the package where that was split out.
* Don't chgrp anything to the 'nogroup' group. The whole idea of the
nogroup group is that it doesn't own anything, so only being a
member of that shouldn't grant you access to anything. Making dirs
and files owned by nogroup messes this up.
* Update nova-manage patch.
* Add iptables-{restore,save} to sudoers file.
* Create a logrotate config for each daemon. Make them restart the
service after rotation.
* Drop python-redis dependency.
* Change python compatibility from "2.6" to "2.6-"
* Add launchpad page to watch file.
* Set Python-Version control fields for python-nova.
* Add ip6tables-{save,restore} to sudoers file. (LP: #704458)
* Add python-glance dependency.
* Include paste config for nova-api.
* Initialise database on initial install.
[ Rick Clark ]
* Add dependency on python-cheetah
* Added iscsi target admin tool to sudoers file.
* Specified log for nova-objectstore.
* Set verbose logging in nova.conf.
[ Monty Taylor ]
* Add dependency on python-netaddr
[ Thierry Carrez (ttx) ]
* Added qemu-nbd to nova_sudoers
-- Chuck Short <email address hidden> Fri, 21 Jan 2011 11:48:06 -0500
-
nova (2011.1~bzr456-0ubuntu1) natty; urgency=low
[ Chuck Short ]
* New upstream snapshot.
* debian/source_nova.py:
Add apport hook.
[ Soren Hansen ]
* Removed logdir.patch. Merged upstream.
* Drop flagfile_location.patch: Merged upstream.
* Use new --state_path flag and weed out the many direct references to
/var/lib/nova.
* Leave it to upstream's 'setup.py install' to install templates.
Remove explicit paths from nova.conf.
-- Chuck Short <email address hidden> Mon, 13 Dec 2010 10:17:01 -0500
-
nova (2011.1~bzr412-0ubuntu1) natty; urgency=low
[ Soren Hansen ]
* New upstream snapshot.
* Added the new tarballs page to debian/watch.
* Clean out patch-branches (everything is upstream now).
* Remove redis-server as a build-depends and don't start it for tests
anymore.
* Add missing dependency on python-webob.
* Force a python-support run (so avoid deferring it until dpkg
triggers run). (LP: #660428)
* Remove build and runtime dependencies on python-tornado. It's not
needed anymore.
* logdir.patch: Add a --logdir option to workers so that they can all
use the same flagfile. (lp:~soren/nova/logdir-flag)
* Consolidate all the flagfiles into one.
* flagfile_location.patch: Patch from upstream to ensure all workers
have a consistent way of finding their flagfile.
(lp:~soren/nova/unify-default-flagfile-location)
* nova-manage_flagfile_location.patch: Make sure nova-manage uses
/etc/nova/nova.conf by default.
* Add build and runtime dependency on openssl. It used to be pulled in
by python-tornado, but is actually used directly by nova.
[ Chuck Short ]
* debian/control:
- Add dependency to python-rrdtool so that nova-instancemonitor
doesnt complain about missing python modules when starting.
* debian/nova-common.install: Add missing templates.
* debian/nova-*.conf: Update flagfiles to handle upstream changes.
* Dropped start-redis since we dont do redis anymore.
-- Soren Hansen <email address hidden> Tue, 23 Nov 2010 11:17:09 +0100
-
nova (0.9.1~bzr331-0ubuntu2) maverick; urgency=low
* Add a minimal patch to ensure a string gets returned as an
instance's internal ID. (LP: #657053)
-- Soren Hansen <email address hidden> Fri, 08 Oct 2010 23:16:58 +0200
