Accepted cinder 2014.1.3-11+deb8u1 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 17 Jun 2015 00:07:12 +0200
Source: cinder
Binary: python-cinder cinder-common cinder-api cinder-volume cinder-scheduler cinder-backup
Architecture: source all
Version: 2014.1.3-11+deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: PKG OpenStack <openstack-devel@lists.alioth.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
cinder-api - OpenStack block storage system - API server
cinder-backup - OpenStack block storage system - Backup server
cinder-common - OpenStack block storage system - common files
cinder-scheduler - OpenStack block storage system - Scheduler server
cinder-volume - OpenStack block storage system - Volume server
python-cinder - OpenStack block storage system - Python libraries
Closes: 788996
Changes:
cinder (2014.1.3-11+deb8u1) jessie-security; urgency=medium
.
* CVE-2015-1851: Cinder host file disclosure through qcow2 backing file.
Applied upstream patch (Closes: #788996):
Disallow_backing_files_when_uploading_volumes_to_image.patch
Checksums-Sha1:
a76437b01acec2cb101f32d0588c290f06c4976a 3479 cinder_2014.1.3-11+deb8u1.dsc
87ac3f63c7a400517b27485a3cd28503371c918b 1057900 cinder_2014.1.3.orig.tar.xz
8c4b4f50548effcdfe9d66ebca11ead4c888a5b8 388652 cinder_2014.1.3-11+deb8u1.debian.tar.xz
f9ab8a4e7356e23c5ff7781cb389e0eea2f8a8ae 1264900 python-cinder_2014.1.3-11+deb8u1_all.deb
94675c7c33ba133ba04e05d1f3429c5cf61c8f55 510296 cinder-common_2014.1.3-11+deb8u1_all.deb
b06801241456c35aa399d6a64f3c771e0f4b25eb 486724 cinder-api_2014.1.3-11+deb8u1_all.deb
e488e496b4d6a68006eb316a9c3f521a29184c5b 481632 cinder-volume_2014.1.3-11+deb8u1_all.deb
d03f63958538047212eff91c2b749c06233b53e1 469994 cinder-scheduler_2014.1.3-11+deb8u1_all.deb
50fc41f622368ea0ea54f9cf68c8af67c844217b 469692 cinder-backup_2014.1.3-11+deb8u1_all.deb
Checksums-Sha256:
5e06b7f6bd72624e5523f879a70000c82df08f4ccec22f8fcdfc4aee7f231626 3479 cinder_2014.1.3-11+deb8u1.dsc
f552a73ecc1024aa765029171a50abebb5bfaf4d2d0f3384558118406ceadedc 1057900 cinder_2014.1.3.orig.tar.xz
a93ba1d1b8b49807fe94b488e9ac2b8ef4bdc3ef8cc4dcefb1bde06a68df32c2 388652 cinder_2014.1.3-11+deb8u1.debian.tar.xz
4bc928baed38a57cf16344f270a82ba6cfeb7c906e6b314ed36a09a25f5b643c 1264900 python-cinder_2014.1.3-11+deb8u1_all.deb
fd76790530d8ffe3546930703e530c310e2824495677c66046d7c0627b55b0cc 510296 cinder-common_2014.1.3-11+deb8u1_all.deb
7004ee572429521dc90fa084fba12e814555a9fc83be814218db4a5837c27b0e 486724 cinder-api_2014.1.3-11+deb8u1_all.deb
7b40c545d600795c37772b46914aa3a72de0b2265128de8162c85e09b748a5d1 481632 cinder-volume_2014.1.3-11+deb8u1_all.deb
ebb2c7a7505315855b0792dbb8326e82675cfc87c1550a233aaf4c9e40916bf3 469994 cinder-scheduler_2014.1.3-11+deb8u1_all.deb
5a2ae260309de27995fb4401647e76a05c111a5e76a2755ec0220ed435d69a59 469692 cinder-backup_2014.1.3-11+deb8u1_all.deb
Files:
193c08ea2eaa305cb42525d4bfa4c4f2 3479 net extra cinder_2014.1.3-11+deb8u1.dsc
915ad0a7b5ae87a55362c984f2bfaa93 1057900 net extra cinder_2014.1.3.orig.tar.xz
c5ee30d39dbf95b9b8501b9c68748832 388652 net extra cinder_2014.1.3-11+deb8u1.debian.tar.xz
b596a67d3cb6e3d676dc06c65bb8b4fd 1264900 python extra python-cinder_2014.1.3-11+deb8u1_all.deb
5b24c0009926047bb2340bf9ad7b663a 510296 net extra cinder-common_2014.1.3-11+deb8u1_all.deb
b6e4b0f1293ed7f76a34037c839d3633 486724 net extra cinder-api_2014.1.3-11+deb8u1_all.deb
6272de9e240b7c5d250379e6cb478c04 481632 net extra cinder-volume_2014.1.3-11+deb8u1_all.deb
fad200936a6a9a241fe634f9e6d1d598 469994 net extra cinder-scheduler_2014.1.3-11+deb8u1_all.deb
2b5fe84c8d5003f6c9d91f182599a4fb 469692 net extra cinder-backup_2014.1.3-11+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=y/u+
-----END PGP SIGNATURE-----
Reply to: