From 07d104d4442a5933a262cd759c3ad1dca55a9366 Mon Sep 17 00:00:00 2001 From: Thomas Goirand Date: Fri, 12 Dec 2014 23:03:08 +0800 Subject: [PATCH] * cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch is now applied upstream, so removed it. --- debian/changelog | 2 + ...rough_invalid_DNS_configuration_juno.patch | 40 ------------------- debian/patches/series | 1 - 3 files changed, 2 insertions(+), 41 deletions(-) delete mode 100644 debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch diff --git a/debian/changelog b/debian/changelog index 8a159d12a..987bf53ae 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,6 +1,8 @@ neutron (2014.2.1-1) experimental; urgency=medium * New upstream release. + * cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch is now + applied upstream, so removed it. -- Thomas Goirand Fri, 12 Dec 2014 23:02:10 +0800 diff --git a/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch b/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch deleted file mode 100644 index 1c1dc75fa..000000000 --- a/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_juno.patch +++ /dev/null @@ -1,40 +0,0 @@ -Description: CVE-2014-7821: Fix hostname regex pattern - Current hostname_pattern regex complexity grows exponentially when given a - string of just digits, which can be exploited to cause neutron-server to - freeze. -Author: John Perkins -Origin: https://review.openstack.org/#/c/135623/ -X-Git-Url: https://review.openstack.org/gitweb?p=openstack%2Fneutron.git;a=commitdiff_plain;h=ad6fefcb4d4068b46b69284e277df6ab2ee30105 -Date: Mon, 6 Oct 2014 21:24:57 +0000 (-0500) -Change-Id: I886c6d883a9cb0acd9908495eec50bf0411d8ba8 -Bug-Ubuntu:: https://launchpad.net/bugs/1378450 -Bug-Debian: https://bugs.debian.org/770431 -Last-Update: 2014-11-21 - -diff --git a/neutron/api/v2/attributes.py b/neutron/api/v2/attributes.py -index 83471f9..21486db 100644 ---- a/neutron/api/v2/attributes.py -+++ b/neutron/api/v2/attributes.py -@@ -540,8 +540,8 @@ def convert_to_list(data): - return [data] - - --HOSTNAME_PATTERN = ("(?=^.{1,254}$)(^(?:(?!\d+\.|-)[a-zA-Z0-9_\-]" -- "{1,63}(?