-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 11 Jul 2024 01:03:28 +0200
Source: nova
Architecture: source
Version: 2:22.4.0-1~deb11u5
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1076774
Changes:
nova (2:22.4.0-1~deb11u5) bullseye-security; urgency=medium
.
* Updated CVE-2024-32498 from git.
* CVE-2024-40767: Regression VMDK/qcow arbitrary file access (CVE-2024-40767)
Added upstream patches (Closes: #1076774):
- CVE-2024-40767_1_port_format_inspector_tests_from_glance_antelope.patch
- CVE-2024-40767_2_Reproduce_iso_regression_with_deep_format_inspection_antelope.patch
- CVE-2024-40767_3_Add-iso-file-format-inspector_antelope.patch
- CVE-2024-40767_4_Change-force_format-strategy-to-catch-mismatches_antelope.patch
* Added qemu-utils as build-depends to run new tests.
Checksums-Sha1:
291f3e41217c935accd41e5fce5c0eea913a3b50 5354 nova_22.4.0-1~deb11u5.dsc
3fe981f6d8420fc811540b3fb04e5d78e3c8da7b 5914864 nova_22.4.0.orig.tar.xz
63c07aea19b80d5c99b5ab5c02dfb52fea5ea763 106484 nova_22.4.0-1~deb11u5.debian.tar.xz
7a83af602f7a0b4979cc74772ebaebfa1ad4c955 24293 nova_22.4.0-1~deb11u5_amd64.buildinfo
Checksums-Sha256:
4cb2a91069e798fc27224afa0eca8ea328bc5d9fcaede2139b524faf8db644e1 5354 nova_22.4.0-1~deb11u5.dsc
a9c2b19beb0d9b21bee968dddbc0a2f572dd373ce5b5ceda51c1ca15bc3e7581 5914864 nova_22.4.0.orig.tar.xz
7658c80c96a7b660bdd08c7123708759a3b4bdae8db196ac69144eebbdfbd788 106484 nova_22.4.0-1~deb11u5.debian.tar.xz
51475825586f970affeecef154b6fa2615d7efc5a51235cdcc8555eb2327f940 24293 nova_22.4.0-1~deb11u5_amd64.buildinfo
Files:
363fc2f2737cce0a65480d6f34917599 5354 net optional nova_22.4.0-1~deb11u5.dsc
9789822c4dba167f15d9b8369d3c0efa 5914864 net optional nova_22.4.0.orig.tar.xz
f5b91dd19df06530fdaca4375cea4bbb 106484 net optional nova_22.4.0-1~deb11u5.debian.tar.xz
43fe10e1e757dcda198b6a5e4565c874 24293 net optional nova_22.4.0-1~deb11u5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Sebv
-----END PGP SIGNATURE-----
Attachment:
pgpwaEKmIP3OJ.pgp
Description: PGP signature