Accepted lava-server 2016.12-3 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 21 Jun 2018 16:27:06 +0100
Source: lava-server
Binary: lava-server lava lava-dev lava-server-doc
Architecture: source all
Version: 2016.12-3
Distribution: stretch-security
Urgency: high
Maintainer: Debian LAVA team <pkg-linaro-lava-devel@lists.alioth.debian.org>
Changed-By: Neil Williams <codehelp@debian.org>
Description:
lava - Linaro Automated Validation Architecture metapackage
lava-dev - Linaro Automated Validation Architecture developer support
lava-server - Linaro Automated Validation Architecture server
lava-server-doc - Linaro Automated Validation Architecture documentation
Changes:
lava-server (2016.12-3) stretch-security; urgency=high
.
* Security upstream hot fix
* CVE-2018-12564 - Remove the ability to paste URLs in the submit page
* CVE-2018-12565 - Use yaml.safe_load when parsing user data
Checksums-Sha1:
f96ab7c71d06d51bf378001814c8c8a20c44da01 2731 lava-server_2016.12-3.dsc
07e4b284fe8b95d61cefff39da516a7b3020ab39 12185744 lava-server_2016.12.orig.tar.gz
24ac3f5208bb6a6d26d24f13ef20c3700ab66c55 44224 lava-server_2016.12-3.debian.tar.xz
4175eb261a2dfdcf581fc5e96e263560fc9ebf2c 21952 lava-dev_2016.12-3_all.deb
45b957723810296b6e27efc81e8e484b6dbece38 8116952 lava-server-doc_2016.12-3_all.deb
29e0c9ebb747036cf2a478b38c1e873761e80cc5 715278 lava-server_2016.12-3_all.deb
c6942fc7aca1852d1a305ba44fedb26e3f944861 10030 lava-server_2016.12-3_amd64.buildinfo
69e39222306ddb4e31235b37e80b37e79e89b53c 16804 lava_2016.12-3_all.deb
Checksums-Sha256:
99fcd4449628e4169a027ef3bfe1878a932eeb9cbaac71a6dbb8505cc5b58ead 2731 lava-server_2016.12-3.dsc
67ae435f7eff405e51fcfe5efe4cdd5b5315540b1facb26167cf75ab5fcb63a7 12185744 lava-server_2016.12.orig.tar.gz
66ffe8bcdc1071e199054e6966180b6b68617d29c00200b8689fd16ed9170796 44224 lava-server_2016.12-3.debian.tar.xz
35da9531b0184f16848cbabb18ec51ed6f7ae331f1c6d7079d7234ce4dfb50aa 21952 lava-dev_2016.12-3_all.deb
8b17fbaa58f83ce9acd6df4a39555e2dc10cff12716278ff8d160c5e567f39ab 8116952 lava-server-doc_2016.12-3_all.deb
1a8c7443645d66f2fe82b338a45950430c8363b0da1f0e2ede32c1edde2a3dc5 715278 lava-server_2016.12-3_all.deb
5e19908f4c45f43673281de8f0243a021236e48cad1c1d189c72359eb54d76cb 10030 lava-server_2016.12-3_amd64.buildinfo
d21ea8d147f0024435b375f5c4424db9c8f3f3109c9ff0187f6d8d3b3cec1808 16804 lava_2016.12-3_all.deb
Files:
919f83f32564cc2ab54c8412651842a7 2731 net optional lava-server_2016.12-3.dsc
4cfeb4277d1de3c7b4fc75b906452f43 12185744 net optional lava-server_2016.12.orig.tar.gz
ad329d18a0ffdec85ea48049d5ab66bb 44224 net optional lava-server_2016.12-3.debian.tar.xz
0b148fb67995d50c0f5347114772078e 21952 devel optional lava-dev_2016.12-3_all.deb
6575a13663af02c259fcdda0d0691ea1 8116952 doc optional lava-server-doc_2016.12-3_all.deb
7fa115ee2b08058341858e14b39dcb5a 715278 net optional lava-server_2016.12-3_all.deb
edfe04d9faaed4c9a9e6994dd2b15401 10030 net optional lava-server_2016.12-3_amd64.buildinfo
365e16c2724afa019b45178edc1d919f 16804 metapackages optional lava_2016.12-3_all.deb
-----BEGIN PGP SIGNATURE-----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=LDsj
-----END PGP SIGNATURE-----
Reply to: