-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 11 Mar 2020 09:26:00 +0100 Source: manila Architecture: source Version: 1:9.0.0-5 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 953581 Changes: manila (1:9.0.0-5) unstable; urgency=medium . * CVE-2020-9543: Manila allows other project users to view, update, delete, or share resources that do not belong to them. Applied upstream patch: share_networks: enable project_only API only (Closes: #953581). * Blacklist a series of tests which fails with the newer SQLAlchemy. Checksums-Sha1: 8496e9ca524c4f6ac9726e3d9c11d2ef21d53698 3669 manila_9.0.0-5.dsc 69cf52b177deff1647d05076f3f92ca8f2e776ee 11416 manila_9.0.0-5.debian.tar.xz 227eff72fc647e303344df1aedd5c646b0438d93 15549 manila_9.0.0-5_amd64.buildinfo Checksums-Sha256: 29f101a0b4a6f617dacd883628b168316fd77d4f6cf108e2e5f75492850dd238 3669 manila_9.0.0-5.dsc 6264f04175b24dfaa7cde3f24355792a397ee4110e794350780a5be9000ea293 11416 manila_9.0.0-5.debian.tar.xz cad99428c0c5dd97851095bd194a0e911183766a90c15766e433eb61346624fa 15549 manila_9.0.0-5_amd64.buildinfo Files: a6d96c671c6adb4df3a52239ef9fa494 3669 net optional manila_9.0.0-5.dsc fb5fa149cb91b1aba63cc80da5c9d57d 11416 net optional manila_9.0.0-5.debian.tar.xz e8f77d5b50ef7ad8df51d45ec83d0c54 15549 net optional manila_9.0.0-5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAl5opaAACgkQ1BatFaxr Q/6XVQ//UVgv2hCBOzUI69fcwkYxwc6bOFK2CYsYejmSYYE4YAEkXYf9y3V432fA Ab3VJts/HA/jaJAAjSpM02wkJBo2ln7MXU7EJS1AlxBkr575nsaxmOBP5+d1ppr8 l7p6aRaRmdtqeQu8XBX2drhHVTKWeP5htljkjRg199eabZQCwTEsp2ZsqxAhd7wf DvY5vYRA14DL3haJPmh9D7y8bGzzfBwcQ7Lgn5VMyYHQMgfowHK8hT5Y7Drllo42 VA1k+HdVrf66dBBSKPGbg7g7aDpsmRbC8EdNtX4g12payh9O1GXDf/oJDBJgL3I0 fg72pQF7DnIYXcp5GkaH8VqsyEXnz+Uo3OPAJ/OfV+ZBFdo4Qqg6VR/HnDolnvdV FR/bGcz04wXmSnAHujF5yt4wqqYJUqab1J5ZvDM/na054kyonTwYHAJZunQ9q7OV gfqGJIgmZdSeq+I5+4Gw0Rg03PpuQVH7ZwmLQjdtKkBw1xR5ywJje6N4Bp7jjHGA tkuCyxDKfP30FrCLD112GLnQD36Ggwyz4XIpC+DDQwDFWvtLQyuK3w6GqFGuzcNw hxSLGY6hEqdEtVc4dMBpv2jx/AXGPE9M/ItsWmOtGuk0gafepbutZbtUPmFLg/Mq jZjGt47VzIS/a9ggTEd71S7A9Z/xqBSVoQ4jqyae6w/cRTEgQTc= =pQBR -----END PGP SIGNATURE-----