-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 18 Jan 2020 19:27:44 +0100 Source: ceph Architecture: source Version: 14.2.6-1~bpo10+2 Distribution: buster-backports Urgency: high Maintainer: Ceph Packaging Team <team+ceph@tracker.debian.org> Changed-By: Bernd Zeimetz <bzed@debian.org> Closes: 949206 Changes: ceph (14.2.6-1~bpo10+2) buster-backports; urgency=high . * [b9f5146] Revert "Move smartmontools to Suggests." This reverts commit 87ab6cde5777b4a5c4bf0b1033d94ed5543b3d7c. * [720ba42] d/rules: make sure mips doesn't match on mipsel/mips64el * [8aab3cc] mgr/dashboard: fix improper URL checking. This change disables up-level references beyond the HTTP base directory. [CVE-2020-1699] Upstream commit 0443e40c11280ba3b7efcba61522afa70c4f8158 Thanks to Salvatore Bonaccorso (Closes: #949206) Checksums-Sha1: 0ed3e2194c40410f7c2b5ef670d97c1ff6895699 8722 ceph_14.2.6-1~bpo10+2.dsc b223edab6a02ce22b94a36bbb158659bbdfa331d 108492 ceph_14.2.6-1~bpo10+2.debian.tar.xz 8b94244cc688e6f365d25f370977b09f013a0c9d 19636 ceph_14.2.6-1~bpo10+2_source.buildinfo Checksums-Sha256: 9d390182599459aa84fc45de03821f13eb5db4d4de642f2c4811587f9f4c32a4 8722 ceph_14.2.6-1~bpo10+2.dsc 0fbe920cb0a238b9e7f96c045171bbe867c0fac27038dcadcb0519ea30affaa5 108492 ceph_14.2.6-1~bpo10+2.debian.tar.xz d9b1d8f0fa69d58f286f4028ff8162f2d3ffa73b6a8a3939a03ad052c0c37e2a 19636 ceph_14.2.6-1~bpo10+2_source.buildinfo Files: e764d42222b74c1c23de9c13356a5d29 8722 admin optional ceph_14.2.6-1~bpo10+2.dsc 5a0c44770e752e390033249ff1ba21fd 108492 admin optional ceph_14.2.6-1~bpo10+2.debian.tar.xz 13e92353316651dab45c41182840524b 19636 admin optional ceph_14.2.6-1~bpo10+2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE7KHj8o4RJDLUhd2V6zYXGm/5Q18FAl4jTvoACgkQ6zYXGm/5 Q1/fsQ/8CCWRieZ96QVZqPDNJaCCn1IO876nBVPO3NOZ6KeQKNSsyaEOdqHKdykN DLfr2HWNyjtInU2tAyB+Jx8ewHczuJBsrL2QtQEtM0Fai2oxdGgQOPQdpoKHCnuO Ddcl5YBmtP3MMaDGnl6wDCx5rkAaCF0v1Ko1EQ6k3sBR2L6WHr1e2kOm886r54jd NUpPu6m07X5tA7ziNrmXDhRldJwOqvofEKabKu+VOEy858otzfP+Ch/cCCPi2Ku7 3P3AFNyOe3CVU39HJc25tYp/AMQa5dRSWWlb1m3Mkhm2VPCEML2C23vzzZ/8JXQO GKvodbrLOWi8qkH8ERFu2DKSKnjX1jMmNmPAtQYe9K3nJI5WWKhOK9H/xiG5Dcqn 2T5URY9FhZ49DZgL7fymeAPPlroKGF0YwPlP2t0dD1Dcr8vUtFMdjgC33uSZwaZj WXekUPJ9K6JGIZ70Wy8ShDoasLQW2ggV+Wgs61dtZMSFUC4aZkxnOgzB0wNQKqfb ESqHOa2XM+Wl3w4OUCuy5UBTRBqM5/3dsKl3eIIl4SSBagduoEIFv1/xhGf1K4Tc QUiU7Cj51yNZ+S8C+Ws8f9IcDkedz5kGVl9ZIh28R8MrhIuS5jrEZy4zrTcAvo/I D5zNOdYYDLCRoYVFNq6hddYuCuQZE4CrcHaxtzUokyUESbxzbMA= =++2g -----END PGP SIGNATURE-----