Accepted neutron 2:17.2.1-0+deb11u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 06 Sep 2021 15:55:27 +0200
Source: neutron
Architecture: source
Version: 2:17.2.1-0+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Michal Arbet <michal.arbet@ultimum.io>
Closes: 993398
Changes:
neutron (2:17.2.1-0+deb11u1) bullseye-security; urgency=medium
.
* New upstream release, includes:
- CVE-2021-40085: By supplying a specially crafted extra_dhcp_opts value,
an authenticated user may add arbitrary configuration to the dnsmasq
process in order to crash the service, change parameters for other
tenants sharing the same interface, or otherwise alter that daemon's
behavior. This vulnerability may also be used to trigger a configuration
parsing buffer overflow in versions of dnsmasq prior to 2.81, which could
lead to remote code execution. All Neutron deployments are affected.
(Closes: #993398).
* d/patches: Remove upstream applied patches
Checksums-Sha1:
f31ae65f59d46571686957908ecff29da1b96974 4977 neutron_17.2.1-0+deb11u1.dsc
540773951ae2ed97324b4abb20e9359784ed9bca 10993216 neutron_17.2.1.orig.tar.xz
01c3eda372198a97862d8911d6cf5910212b9351 50020 neutron_17.2.1-0+deb11u1.debian.tar.xz
24e896a546e6e2dacbcd1015c080536fcdc231ac 20378 neutron_17.2.1-0+deb11u1_amd64.buildinfo
Checksums-Sha256:
ed26c8901fd07a5250323436c3afe952f482fa8e2bc57fa8d1a094deb5364580 4977 neutron_17.2.1-0+deb11u1.dsc
526ebe513911123c3e293eb316d944bb32326c68dd963848b92d6af100234d96 10993216 neutron_17.2.1.orig.tar.xz
a43db7695afce38950bea64f7b14dd93cc9ab6a9ffafecf4230702e690038c62 50020 neutron_17.2.1-0+deb11u1.debian.tar.xz
6d0c6cde2115a0bdd07dac4e97d9fd3e583f91b66b4dd05c1cdb692136a13d76 20378 neutron_17.2.1-0+deb11u1_amd64.buildinfo
Files:
28e9d83ac1a75c571e2cd8cf3f787a25 4977 net optional neutron_17.2.1-0+deb11u1.dsc
cbfbfa0731d5f1ad6d285ab761ed9c94 10993216 net optional neutron_17.2.1.orig.tar.xz
666c735b14fe0f709f08cf31f103655f 50020 net optional neutron_17.2.1-0+deb11u1.debian.tar.xz
b6415a47e8346fc3827638a881fb9d56 20378 net optional neutron_17.2.1-0+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmFcax4ACgkQ1BatFaxr
Q/7MpRAAlcCXvdtEjx8wN0eOAy8Fb2ErlUd9Obx9dyV7dqb3qabkkMmLZfwuUMDD
Hp3czuaU8M/i7/fjvXf2kH4sjUxmXqv0bbKqG8j27T+MzTnuxAndEAYNwfHIM8JH
vhUYmisuOkokBMHwsH389fbrRZl7ntIRYn/3BOVx0ea30LQn3lxbacmjKmal/Td3
k+9huFR6ubLv7fZVZldMBDMJwCM3tIUvlcFzZ2FSfgMfGKecXi99p+ET0AxOjTob
cuAAvVoyzWCZdgXJJnJSQnT8u7o+7kQDZEJgzUDUvbHGHY6aZ64oJe83XX6gpc6R
CdS5HiIUrbqEoX3SS4oMpPVe2/6Tub8wLiHPh6D1gbXyLfYHtQ9LpW0wjwZCrYII
W/TkV+fSNu+Xt8zYic5shB5D0IHfTQQ9g5dnqI5Qf6o09T0hA0MQsS6iiZRJzQDe
+jJEeeoU+omVvrZXpcDmRBhRQmeDMKzFqr/q3nDRnNxI/YsU6QZD3jIgtjjmMToS
G9ThWqfVqoQ9ZZ5ZAm8bieV4paU8KXU51SitWkBPytNzk09a4alAlmkT97LU0gqT
TTUYiyuWmt+Gxs8P6pskgHVPaozoqvXhQ6XlsQNzifpYjfPJ2GxymI5wqY9t4gG+
DabVguXkEIAxezoFT7htx1hDw1DN5OK4erHnUTK/Cdn3sgpKI+U=
=EECl
-----END PGP SIGNATURE-----
Reply to: