Author: buildbot
Date: Thu Aug 2 00:23:39 2012
New Revision: 827665
Log:
Staging update by buildbot for libcloud
Modified:
websites/staging/libcloud/trunk/content/ (props changed)
websites/staging/libcloud/trunk/content/about.html
websites/staging/libcloud/trunk/content/community-resources.html
websites/staging/libcloud/trunk/content/contributing.html
websites/staging/libcloud/trunk/content/credits.html
websites/staging/libcloud/trunk/content/devinfo.html
websites/staging/libcloud/trunk/content/downloads.html
websites/staging/libcloud/trunk/content/driver-features.html
websites/staging/libcloud/trunk/content/europython-libcloud-sprint.html
websites/staging/libcloud/trunk/content/getting-started.html
websites/staging/libcloud/trunk/content/gsoc-2012-ideas.html
websites/staging/libcloud/trunk/content/gsoc-2012.html
websites/staging/libcloud/trunk/content/gsoc.html
websites/staging/libcloud/trunk/content/index.html
websites/staging/libcloud/trunk/content/news.html
websites/staging/libcloud/trunk/content/security.html
websites/staging/libcloud/trunk/content/sitemap.html
websites/staging/libcloud/trunk/content/supported_providers.html
websites/staging/libcloud/trunk/content/testing.html
websites/staging/libcloud/trunk/content/upgrade-notes-0-6.html
websites/staging/libcloud/trunk/content/upgrade-notes-0-7.html
websites/staging/libcloud/trunk/content/upgrade-notes-0-8.html
websites/staging/libcloud/trunk/content/upgrade-notes.html
websites/staging/libcloud/trunk/content/whos-using.html
Propchange: websites/staging/libcloud/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Thu Aug 2 00:23:39 2012
@@ -1 +1 @@
-1367165
+1368318
Modified: websites/staging/libcloud/trunk/content/about.html
==============================================================================
--- websites/staging/libcloud/trunk/content/about.html (original)
+++ websites/staging/libcloud/trunk/content/about.html Thu Aug 2 00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/community-resources.html
==============================================================================
--- websites/staging/libcloud/trunk/content/community-resources.html (original)
+++ websites/staging/libcloud/trunk/content/community-resources.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/contributing.html
==============================================================================
--- websites/staging/libcloud/trunk/content/contributing.html (original)
+++ websites/staging/libcloud/trunk/content/contributing.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/credits.html
==============================================================================
--- websites/staging/libcloud/trunk/content/credits.html (original)
+++ websites/staging/libcloud/trunk/content/credits.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/devinfo.html
==============================================================================
--- websites/staging/libcloud/trunk/content/devinfo.html (original)
+++ websites/staging/libcloud/trunk/content/devinfo.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/downloads.html
==============================================================================
--- websites/staging/libcloud/trunk/content/downloads.html (original)
+++ websites/staging/libcloud/trunk/content/downloads.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
@@ -95,19 +95,19 @@
<h2 id="downloads">Downloads</h2>
<ul>
- <li>0.11.0 - Released July 30th, 2012 (<a
href="https://svn.apache.org/viewvc/libcloud/tags/0.11.0/CHANGES?revision=r136489&view=markup";>CHANGES</a>):
+ <li>0.11.1 - Released August 1st, 2012:
<ul>
- <li><a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.tar.bz2";>apache-libcloud-0.11.0.tar.bz2</a>
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.tar.bz2.asc";>asc</a>]
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.tar.bz2.sha1";>sha1</a>]
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.tar.bz2.md5";>md5</a>]
+ <li><a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.tar.bz2";>apache-libcloud-0.11.1.tar.bz2</a>
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.tar.bz2.asc";>asc</a>]
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.tar.bz2.sha1";>sha1</a>]
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.tar.bz2.md5";>md5</a>]
</li>
- <li><a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.zip";>apache-libcloud-0.11.0.zip</a>
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.zip.asc";>asc</a>]
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.zip.sha1";>sha1</a>]
- [<a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/apache-libcloud-0.11.0.zip.md5";>md5</a>]
+ <li><a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.zip";>apache-libcloud-0.11.1.zip</a>
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.zip.asc";>asc</a>]
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.zip.sha1";>sha1</a>]
+ [<a
href="http://www.apache.org/dist/libcloud/apache-libcloud-0.11.1.zip.md5";>md5</a>]
</li>
- <li>Verify with these public <a
href="http://www.apache.org/dyn/closer.cgi?path=libcloud/KEYS";>KEYS</a> used by
Apache Libcloud developers.</li>
+ <li>Verify with these public <a
href="http://www.apache.org/dist/libcloud/KEYS";>KEYS</a> used by Apache
Libcloud developers.</li>
</ul>
</li>
</ul>
@@ -135,7 +135,7 @@ gpg: next trustdb check due at 2011-10-3
</li>
<li>
Verify package with .asc signature:
-<pre>$ <strong>gpg --verify apache-libcloud-0.11.0.tar.bz2.asc</strong>
+<pre>$ <strong>gpg --verify apache-libcloud-0.11.1.tar.bz2.asc</strong>
gpg: Signature made Wed Oct 6 15:31:35 2010 CDT using DSA key ID 42721F00
<span style="color:green">gpg: Good signature from "Paul Querna <...>"
gpg: aka "Paul Querna <...>"
@@ -144,7 +144,7 @@ gpg: WARNING: This key is not certified
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 39F6 691A 0ECF 0C50 E8BB 849C F788 75F6 4272
1F00</pre>
Example bad signature:
-<pre>$ <strong>gpg --verify apache-libcloud-0.11.0.tar.bz2.asc</strong>
+<pre>$ <strong>gpg --verify apache-libcloud-0.11.1.tar.bz2.asc</strong>
gpg: Signature made Wed Oct 6 15:31:35 2010 CDT using DSA key ID 42721F00
<span style="color:red">gpg: BAD signature from "Paul Querna
<...>"</span></pre>
</li>
Modified: websites/staging/libcloud/trunk/content/driver-features.html
==============================================================================
--- websites/staging/libcloud/trunk/content/driver-features.html (original)
+++ websites/staging/libcloud/trunk/content/driver-features.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified:
websites/staging/libcloud/trunk/content/europython-libcloud-sprint.html
==============================================================================
--- websites/staging/libcloud/trunk/content/europython-libcloud-sprint.html
(original)
+++ websites/staging/libcloud/trunk/content/europython-libcloud-sprint.html Thu
Aug 2 00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/getting-started.html
==============================================================================
--- websites/staging/libcloud/trunk/content/getting-started.html (original)
+++ websites/staging/libcloud/trunk/content/getting-started.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/gsoc-2012-ideas.html
==============================================================================
--- websites/staging/libcloud/trunk/content/gsoc-2012-ideas.html (original)
+++ websites/staging/libcloud/trunk/content/gsoc-2012-ideas.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/gsoc-2012.html
==============================================================================
--- websites/staging/libcloud/trunk/content/gsoc-2012.html (original)
+++ websites/staging/libcloud/trunk/content/gsoc-2012.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/gsoc.html
==============================================================================
--- websites/staging/libcloud/trunk/content/gsoc.html (original)
+++ websites/staging/libcloud/trunk/content/gsoc.html Thu Aug 2 00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/index.html
==============================================================================
--- websites/staging/libcloud/trunk/content/index.html (original)
+++ websites/staging/libcloud/trunk/content/index.html Thu Aug 2 00:23:39 2012
@@ -103,7 +103,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/news.html
==============================================================================
--- websites/staging/libcloud/trunk/content/news.html (original)
+++ websites/staging/libcloud/trunk/content/news.html Thu Aug 2 00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/security.html
==============================================================================
--- websites/staging/libcloud/trunk/content/security.html (original)
+++ websites/staging/libcloud/trunk/content/security.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
@@ -94,7 +94,25 @@
<div id="main" class="span-16 last">
<h2 id="libcloud-vulnerabilities">Libcloud Vulnerabilities</h2>
-<p><strong>SSL MITM vulnerability - CVE-2010-4340</strong></p>
+<h3
id="cve-2012-3446-possible-ssl-mitm-due-to-invalid-regular-expression-used-to-validate-the-target-server-hostname">[CVE-2012-3446]
Possible SSL MITM due to invalid regular expression used to validate the
target server hostname</h3>
+<p><strong>Severity</strong>: Medium</p>
+<p><strong>Versions Affected</strong>:</p>
+<p>Apache Libcloud 0.4.2 to 0.11.1</p>
+<p>Versions prior to 0.4.2 don't perform any target server SSL certificate
+validation.</p>
+<p><strong>Description</strong>:</p>
+<p>When establishing a secure (SSL / TLS) connection to a target server an
+invalid regular expression has been used for performing the hostname
+verification. Subset instead of the full target server hostname has been
+marked an an acceptable match for the given hostname.</p>
+<p>For example, certificate with a hostname field of "aexample.com" was
considered
+a valid certificate for domain "example.com".</p>
+<p><strong>Mitigation</strong>:</p>
+<p>Users should upgrade to the latest version (0.11.1) which includes a
fix.</p>
+<p><strong>Credit</strong>:</p>
+<p>This issue was discovered by researchers from the University of Texas at
Austin
+(Martin Georgiev, Suman Jana and Vitaly Shmatikov).</p>
+<h3 id="cve-2010-4340-ssl-mitm-vulnerability">[CVE-2010-4340] SSL MITM
vulnerability</h3>
<p><strong>Description</strong>:</p>
<p>Python SSL library doesn't validate a host SSL certificate and as a
consequence, versions prior to <strong>0.4.2</strong> are vulnerable to a
man-in-the-middle
Modified: websites/staging/libcloud/trunk/content/sitemap.html
==============================================================================
--- websites/staging/libcloud/trunk/content/sitemap.html (original)
+++ websites/staging/libcloud/trunk/content/sitemap.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/supported_providers.html
==============================================================================
--- websites/staging/libcloud/trunk/content/supported_providers.html (original)
+++ websites/staging/libcloud/trunk/content/supported_providers.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/testing.html
==============================================================================
--- websites/staging/libcloud/trunk/content/testing.html (original)
+++ websites/staging/libcloud/trunk/content/testing.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/upgrade-notes-0-6.html
==============================================================================
--- websites/staging/libcloud/trunk/content/upgrade-notes-0-6.html (original)
+++ websites/staging/libcloud/trunk/content/upgrade-notes-0-6.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/upgrade-notes-0-7.html
==============================================================================
--- websites/staging/libcloud/trunk/content/upgrade-notes-0-7.html (original)
+++ websites/staging/libcloud/trunk/content/upgrade-notes-0-7.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/upgrade-notes-0-8.html
==============================================================================
--- websites/staging/libcloud/trunk/content/upgrade-notes-0-8.html (original)
+++ websites/staging/libcloud/trunk/content/upgrade-notes-0-8.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/upgrade-notes.html
==============================================================================
--- websites/staging/libcloud/trunk/content/upgrade-notes.html (original)
+++ websites/staging/libcloud/trunk/content/upgrade-notes.html Thu Aug 2
00:23:39 2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
Modified: websites/staging/libcloud/trunk/content/whos-using.html
==============================================================================
--- websites/staging/libcloud/trunk/content/whos-using.html (original)
+++ websites/staging/libcloud/trunk/content/whos-using.html Thu Aug 2 00:23:39
2012
@@ -68,7 +68,7 @@
<h3>Get it</h3>
<div id="get-it">
- Latest stable: <a href="/downloads.html">0.11.0</a> (July 30th, 2012)
+ Latest stable: <a href="/downloads.html">0.11.1</a> (August 1st, 2012)
</div>
<h3>Need help?</h3>
