-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 09 Mar 2020 15:53:45 +0100 Source: manila Architecture: source Version: 1:7.0.0-1+deb10u1 Distribution: buster Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 953581 Changes: manila (1:7.0.0-1+deb10u1) buster; urgency=medium . * CVE-2020-9543: Manila allows other project users to view, update, delete, or share resources that do not belong to them. Applied upstream patch: share_networks: enable project_only API only (Closes: #953581). Checksums-Sha1: 81d919ff9dd4f53c64bd77defdfcc0eba748c3f2 4073 manila_7.0.0-1+deb10u1.dsc 53f9e7cc816e110a4abae74d04510cfc3e0bdce4 10992 manila_7.0.0-1+deb10u1.debian.tar.xz a5d22f46ef7ff5022cd8ab54845115340a31bf35 16106 manila_7.0.0-1+deb10u1_amd64.buildinfo Checksums-Sha256: ee2ece022dd2d3461071f36a382b94f75f7a21a385e51b38c5afddb35fb2fc00 4073 manila_7.0.0-1+deb10u1.dsc 9eca1502fa8f37dee2795028d5e2aac1603a3627d05d7fe7d5a8e64e719a20da 10992 manila_7.0.0-1+deb10u1.debian.tar.xz 37a9ae1fa4fadca0f7d88ff9011f6536a01d6b57d0881c18c545b53671cc4db0 16106 manila_7.0.0-1+deb10u1_amd64.buildinfo Files: 3cc5b2f231c78f1ece567bfa066704dd 4073 net optional manila_7.0.0-1+deb10u1.dsc 6275d18fe2e251c09352b56b37c80def 10992 net optional manila_7.0.0-1+deb10u1.debian.tar.xz ddc1d9961b4b7a38b8db8f88c99c071a 16106 net optional manila_7.0.0-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAl5/YnUACgkQ1BatFaxr Q/73wQ/+J9mzSpY8u0MYsZvMtvrFLjsCUnILgiE7d0lRdEQQwDlFmycuC1ndfCaq lNKgP/XYsadze0btCfVbB5mMSPHb5qvd34neafZnxpfFQQ3DaLzUagDYwteMN4Fl fY8I4CT1WrMFbS1Z5MpwRQ5ITW0MNtsB5iuEBe4cXTcy6EHieQABmWCmcXI/kNd4 aBl1cSq8R86TL2kiaPHrde8MG7vso1HoiWkJGhHdWBFXOODZ4dwZniA1yD2VOABN qX/5lmLXsi0EKNbQPCobwyKqoDN0bjTpq0nNMygAccQ1y085Lhal4gvgUW8s4m5z AypCooJolfVLZJ2rJGUGLzimTy6M/7NglRMAyEZebpfbxyG9bglwC/bjw/7NBs76 c5i1kxkY8so1aB8u0t6xPWx7q3bPO8/7+8AsSGsVoaIiB99/3UGtIZOp3KgmQkaa aeIQ0cPWGmC/aYgSARsAIx42/miJ2I3B3yNn3Efn4GHz7MJIhb50OR1zZArWO5Wx SUdc4s6Q57ioJUoNjyT7biC4aQSOiIPnTX2gO06V2snKbc3g12PqVYGigGkGJTNA GmDrQDOR76UVsHN9PtK5BOKqIn9ql6Dnb9KOE4uPMsWLYGWAn+FtO/MYh5BM52Jh iPLA7v7lZoIGIrGIakrkciZhSN8nZEophv0jJWF8uCt9iQUT2/c= =Zy1A -----END PGP SIGNATURE-----