Ubuntu

“keystone” 2012.2-0ubuntu1.2 source package in The Quantal Quetzal

Publishing history

2012.2-0ubuntu1.2
SUPERSEDED: Quantal pocket Updates in component main and section net
  • Removed from disk on 2013-02-07.
  • Removal requested on 2013-01-30.
  • Superseded on 2013-01-29 by keystone - 2012.2.1-0ubuntu1
  • Published on 2012-11-28
  • Copied from ubuntu quantal in Private PPA for Ubuntu Security Team by Ubuntu Archive Robot
2012.2-0ubuntu1.2
SUPERSEDED: Quantal pocket Security in component main and section net
  • Removed from disk on 2013-02-07.
  • Removal requested on 2013-02-06.
  • Superseded on 2013-02-05 by keystone - 2012.2.1-0ubuntu1.1
  • Published on 2012-11-28
  • Copied from ubuntu quantal in Private PPA for Ubuntu Security Team by Jamie Strandboge

Changelog

keystone (2012.2-0ubuntu1.2) quantal-security; urgency=low

  * SECURITY UPDATE: fix for EC2-style credentials invalidation
    - debian/patches/CVE-2012-5571.patch: adjust contrib/ec2/core.py to verify
      that the user is in at least one valid role for the tenant
    - CVE-2012-5571
    - LP: #1064914
  * debian/patches/fix-ssl-tests-lp1068851.patch: update certificates for
    SSL tests
  * SECURITY UPDATE: fix for token expiration
    - debian/patches/CVE-2012-5563.patch: ensure token expiration is
      maintained
    - CVE-2012-5563
    - LP: #1079216
 -- Jamie Strandboge <email address hidden>   Wed, 28 Nov 2012 11:29:47 -0600