maas (1.4+bzr1693+dfsg-0ubuntu2.3) saucy-security; urgency=low
* SECURITY UPDATE: incorrect Content-type header allowed cross-site
scripting vulnerability if an unknown API was used. (LP: #1251336)
- debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
browsers to not render error messages as HTML.
- CVE-2013-1070
* SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
password. (LP: #1254034)
- debian/maas-region-controller-min.postinst: chown and chmod
/etc/maas/txlongpoll.yaml with correct permissions
- CVE-2013-1069
Date: 2014-02-13 02:26:15.380922+00:00
Changed-By: Seth Arnold <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/saucy/+source/maas/1.4+bzr1693+dfsg-0ubuntu2.3
Sorry, changesfile not available.
--
Saucy-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/saucy-changes
