-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: glance Binary: python-glance, glance, python-glance-doc, glance-common, glance-api, glance-registry Architecture: all Version: 2014.1.3-11 Maintainer: PKG OpenStack <[email protected]> Uploaders: Thomas Goirand <[email protected]> Homepage: http://glance.openstack.org/ Standards-Version: 3.9.6 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=openstack/glance.git;a=summary Vcs-Git: git://anonscm.debian.org/openstack/glance.git Build-Depends: debhelper (>= 9), dh-systemd, openstack-pkg-tools (>= 22~), po-debconf, python-all (>= 2.6.6-3~), python-pbr (>= 0.6), python-setuptools, python-sphinx (>= 1.1.2) Build-Depends-Indep: curl, procps, python-anyjson (>= 0.3.3), python-babel (>= 1.3), python-boto (>= 2.12.0), python-cinderclient (>= 1:1.0.6), python-coverage (>= 3.6), python-crypto, python-eventlet (>= 0.13.0), python-fixtures (>= 0.3.14), python-glanceclient, python-greenlet (>= 0.3.2), python-hacking (>= 0.8.0), python-httplib2 (>= 0.7.5), python-iso8601 (>= 0.1.9), python-jsonschema (>= 2.0.0), python-keystoneclient (>= 1:0.7.0), python-kombu (>= 2.4.8), python-lxml, python-migrate (>= 0.8.2), python-mock (>= 1.0), python-mox, python-mysqldb, python-openssl, python-oslo.config (>= 1.2.1), python-oslo.messaging (>= 1.3.0~a9), python-oslo.vmware, python-oslosphinx, python-passlib, python-paste, python-pastedeploy, python-psutil (>= 1.1.1), python-psycopg2, python-qpid, python-requests (>= 1.1), python-routes, python-sendfile (>= 2.0), python-six (>= 1.6.0), python-sqlalchemy (>= 0.7.8), python-stevedore (>= 0.14), python-subunit (>= 0.0.18), python-swiftclient (>= 1:1.6), python-testtools (>= 0.9.34), python-webob (>= 1.2.3), python-xattr, sqlite3, subunit (>= 0.0.18), testrepository (>= 0.0.18) Package-List: glance deb python extra arch=all glance-api deb python extra arch=all glance-common deb python extra arch=all glance-registry deb python extra arch=all python-glance deb python extra arch=all python-glance-doc deb doc extra arch=all Checksums-Sha1: ca25029ccbf7de65461baaf6ffb4dee116fa4e45 559968 glance_2014.1.3.orig.tar.xz 35debdaba27c16b36bf58683308c19fd39e3cfb3 40104 glance_2014.1.3-11.debian.tar.xz Checksums-Sha256: fe432e0b5542ace98ee61f9b1c257a27b5fac2292cc5f50d1dc21e5fea60936d 559968 glance_2014.1.3.orig.tar.xz b8612b70da748bb6bc0f3dec957ec2683af74c5b564bec4e61026c86c8784aa7 40104 glance_2014.1.3-11.debian.tar.xz Files: 087f9bd17c9e5d93229c0087b99df523 559968 glance_2014.1.3.orig.tar.xz e347a1b2fc36c7e318c6d391c523a778 40104 glance_2014.1.3-11.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUv9WZAAoJENQWrRWsa0P+ADcP/j2Tf9IGC+J1GQeANzdX/iIW dUBad2CcSkTZ53yCaOZjyUOjEhvJmwunmctzAc2t9ZZh8pCZX7x3zb1F2+GW85j+ vKwl1xzoOPC6H0aNBmxZeaV75227Tnt3nR5h1kRSf8SxNZjWwOo1TLMHwdLQQnJR 7BgFRez6dosothks/HD0QVt3fdN+PIAVOtPdHe4DFxTMIa1GzFNF57tCQgQQpbHe EA90orPsVwHvauo80TrKRcgqwbVIA4+VsQ+E7N6lu6sc9t4a4mjCdMUkoHRLzjFL B96SbagFkaLdluXngEHbMT9lRf32D7MAKB6oOUcYj59jiVFuCm8tgIL6OKj6k/90 m4kMTm8KPq+8VmOOqq43aYmOWTTxgEhBT2aQV9osMqyBPNV7i+koBPRg+6Fc/6gd 1bDf/1JtO9G/2zVc7IXC0PxGrVSTs7kGeaCz3tKotjmBdsvIqYE81Ns3kBm1cI4t h3owIVP+i5OGRrrSOd1QHYrcv+a+V1dYTELegJJdZeykZOfGb9ximp34255y0LR3 wHFJqewdFwZUFoo5/0CA97CTQVziLMdAsL6HP0M/XJ9vGEYbPqQKdDzE4CQ9zdC8 oklwwd55dybBoyV5CHiu4GkynQYo8cc1gNvFScEVuiW+t3DOQ1LPs6Yrcou7zwTv j4+0zKxb0S7q3uUfpdIV =shMw -----END PGP SIGNATURE----- Changes: glance (2014.1.3-11) unstable; urgency=high * CVE-2015-1195: fixes "Glance still allows users to download and delete any file in glance-api server" by applying upstream patch (Closes: #775926). -- Thomas Goirand <[email protected]> Wed, 21 Jan 2015 16:13:33 +0000