UbuntuUpdates.org

Package "maas"

Name: maas

Description:

Ubuntu MAAS Server
Latest version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.6
Release: precise (12.04)
Level: updates
Repository: main
Homepage: https://launchpad.net/maas

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "maas"

All arch deb package
APT INSTALL

Other versions of "maas" in Precise

Repository Area Version
base main 0.1+bzr482+dfsg-0ubuntu1
security universe 1.2+bzr1373+dfsg-0ubuntu1~12.04.6
security main 1.2+bzr1373+dfsg-0ubuntu1~12.04.6
updates universe 1.2+bzr1373+dfsg-0ubuntu1~12.04.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.6 2014-12-04 22:06:22 UTC

  maas (1.2+bzr1373+dfsg-0ubuntu1~12.04.6) precise-security; urgency=medium

  * Fix compatibility with mod-wsgi security update (LP: #1399016)
    - debian/patches/home-directory.patch: specify a valid home directory
      for the maas user, since mod-wsgi no longer works without one.
 -- Marc Deslauriers <email address hidden> Thu, 04 Dec 2014 14:00:28 -0500
Source diff to previous version
1399016 MAAS failed to respond once libapache2-mod-wsgi upgrade on trusty

Version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.5 2014-02-13 21:06:25 UTC

  maas (1.2+bzr1373+dfsg-0ubuntu1~12.04.5) precise-security; urgency=low

  * SECURITY UPDATE: incorrect Content-type header allowed cross-site
    scripting vulnerability if an unknown API was used. (LP: #1251336)
    - debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
      browsers to not render error messages as HTML.
    - CVE-2013-1070
  * SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
    password. (LP: #1254034)
    - debian/maas-region-controller.postinst: chown and chmod
      /etc/maas/txlongpoll.yaml with correct permissions
    - CVE-2013-1069
 -- Seth Arnold <email address hidden> Mon, 10 Feb 2014 22:49:35 -0800
Source diff to previous version
1251336 MaaS API is vulnerable to XSS
1254034 txlongpoll.yaml contains password but is world readable
CVE-2013-1070 RESERVED
CVE-2013-1069 RESERVED

Version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.4 2013-11-07 04:06:44 UTC

  maas (1.2+bzr1373+dfsg-0ubuntu1~12.04.4) precise-security; urgency=low

  * SECURITY UPDATE: failure to authenticate downloaded content (LP: #1039513)
    - debian/patches/CVE-2013-1058.patch: Authenticate downloaded files with
      GnuPG and MD5SUM files. Thanks to Julian Edwards.
    - CVE-2013-1058
  * SECURITY UPDATE: configuration options may be loaded from current working
    directory (LP: #1158425)
    - debian/patches/CVE-2013-1057-1-2.patch: Do not load configuration
      options from the current working directory. Thanks to Julian Edwards.
    - CVE-2013-1057
 -- Seth Arnold <email address hidden> Fri, 01 Nov 2013 17:09:57 -0700
Source diff to previous version
1039513 maas-import-pxe-files doesn't cryptographically verify what it downloads
1158425 maas-import-pxe-files sources path-relative config
CVE-2013-1058 RESERVED
CVE-2013-1057 RESERVED

Version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.3 2013-11-04 19:06:55 UTC

  maas (1.2+bzr1373+dfsg-0ubuntu1~12.04.3) precise-proposed; urgency=low

  * MAAS Stable Release Update:
    - debian/patches/04-dhcp-lease-conflict.patch: Sets expiry lease time
      to 30 seconds (LP: #1069570)
 -- Andres Rodriguez <email address hidden> Thu, 05 Sep 2013 22:53:10 -0400
Source diff to previous version

Version: 1.2+bzr1373+dfsg-0ubuntu1~12.04.2 2013-09-18 07:06:57 UTC

  maas (1.2+bzr1373+dfsg-0ubuntu1~12.04.2) precise-proposed; urgency=low

  * MAAS Stable Release Update, debian/patches:
    - 99_filestorage_empty_files_lp1204507.patch: Fix to allow the storage
      of empty files when using Juju Go, otherwise machines will fail to
      bootstrap. (LP: #1204507)
    - 99_fix_highbank_localboot_lp1172966.patch: Fix to PXE LOCALBOOT on
      highbank servers by removing a PXE message. Otherwise highbank will
      fail to pxe boot. (LP: #1172966)
    - 99_no_ipmi_detection_kvm_lp1064527.patch: Fix to ensure that IPMI
      detection does not happen on KVM VM's, otherwise enlistment and
      commissioning process will take too long. (LP: #1064527)
    - 99_update_cluster_info_cli_lp1172193.patch: Fix to allow admins to
      update cluster information from the API/CLI and not only restrict it
      to the WebUI. (LP: #1172193)
    - 99_fix_ipmi_power_command_lp1171418: Fix to ensure that ipmi commands
      are always executed regardless of the state of the machine.
      (LP: #1171418)
    - 99_default_timezone_utc_lp1211447.patch: Default to UTC for the
      deployed nodes. (LP: #1211447)
 -- Andres Rodriguez <email address hidden> Mon, 12 Aug 2013 12:18:34 -0400
1204507 MAAS rejects empty files
1172966 SAY command in config.local.template breaks local boot on highbank
1064527 detect_ipmi needs improvement. detects non-existant device in nested kvm
1172193 The clusters' information cannot be updated via the API/CLI
1171418 MAAS fails to power up machines when trying to install nodes
1211447 MAAS default timezone is not UTC


About   -   Send Feedback to @ubuntu_updates