[ubuntu/trusty-security] python-keystoneclient 1:0.7.1-ubuntu1.2 (Accepted)

[Seth Arnold]

python-keystoneclient (1:0.7.1-ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect cert verification with ssl_insecure option
    - debian/patches/CVE-2014-7144.patch: properly parse option in
      keystoneclient/middleware/auth_token.py.
    - CVE-2014-7144
  * SECURITY UPDATE: incorrect cert verification with ssl_insecure option
    - debian/patches/CVE-2015-1852.patch: properly parse option in
      keystoneclient/middleware/s3_token.py, added test to
      keystoneclient/tests/test_s3_token_middleware.py.
    - CVE-2015-1852
  * Properly run test suite during build:
    - debian/control: added python-testresources to Build-Depends
    - debian/rules: call testr directly

Date: 2015-07-16 21:33:12.540658+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Maintainer: Chuck Short <chuck.short at canonical.com>
Signed-By: Seth Arnold <seth.arnold at canonical.com>
https://launchpad.net/ubuntu/+source/python-keystoneclient/1:0.7.1-ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.