Bug#785780: jessie-pu: package python-keystonemiddleware 1.0.0-3 -> 1.0.0-3+deb8u1 and python-keystoneclient 0.10.1-2 -> 0.10.1-2+deb8u1 (CVE-2015-1852)

To: 785780@bugs.debian.org
Cc: Thomas Goirand <zigo@debian.org>
Subject: Bug#785780: jessie-pu: package python-keystonemiddleware 1.0.0-3 -> 1.0.0-3+deb8u1 and python-keystoneclient 0.10.1-2 -> 0.10.1-2+deb8u1 (CVE-2015-1852)
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Sat, 20 Jun 2015 12:06:42 +0100
Message-id: <[🔎] 0edd045d0a997bfd55cdd74e61e9cffe@mail.adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 785780@bugs.debian.org
In-reply-to: <[🔎] 1434653300.14379.56.camel@adam-barratt.org.uk>
References: <[🔎] 558134E3.5000209@debian.org> <[🔎] 1434653300.14379.56.camel@adam-barratt.org.uk>

Control: tags -1 + pending

On 2015-06-18 19:48, Adam D. Barratt wrote:

Control: tags -1 -moreinfo +confirmed

On Wed, 2015-06-17 at 10:50 +0200, Thomas Goirand wrote:

Hi,

Sorry, I almost completely forgot about this issue.

I have uploaded a fix today in Sid and in Jessie backports. Can we get
the fix reach Jessie proposed updates as well?


I'm really not particularly keen on new (build-)dependencies for the
sake of converting a string to a boolean, but I appreciate that it's
upstream's fix. :-|

Feel free to upload.


Both packages were uploaded and I've flagged them for acceptance.

Regards,

Adam

Reply to:

References:
- Bug#785780: jessie-pu: package python-keystonemiddleware 1.0.0-3 -> 1.0.0-3+deb8u1 and python-keystoneclient 0.10.1-2 -> 0.10.1-2+deb8u1 (CVE-2015-1852)
  - From: Thomas Goirand <zigo@debian.org>
- Bug#785780: jessie-pu: package python-keystonemiddleware 1.0.0-3 -> 1.0.0-3+deb8u1 and python-keystoneclient 0.10.1-2 -> 0.10.1-2+deb8u1 (CVE-2015-1852)
  - From: "Adam D. Barratt" <adam@adam-barratt.org.uk>