-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 06 Sep 2021 15:55:27 +0200 Source: neutron Architecture: source Version: 2:17.2.1-0+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Michal Arbet <michal.arbet@ultimum.io> Closes: 993398 Changes: neutron (2:17.2.1-0+deb11u1) bullseye-security; urgency=medium . * New upstream release, includes: - CVE-2021-40085: By supplying a specially crafted extra_dhcp_opts value, an authenticated user may add arbitrary configuration to the dnsmasq process in order to crash the service, change parameters for other tenants sharing the same interface, or otherwise alter that daemon's behavior. This vulnerability may also be used to trigger a configuration parsing buffer overflow in versions of dnsmasq prior to 2.81, which could lead to remote code execution. All Neutron deployments are affected. (Closes: #993398). * d/patches: Remove upstream applied patches Checksums-Sha1: f31ae65f59d46571686957908ecff29da1b96974 4977 neutron_17.2.1-0+deb11u1.dsc 540773951ae2ed97324b4abb20e9359784ed9bca 10993216 neutron_17.2.1.orig.tar.xz 01c3eda372198a97862d8911d6cf5910212b9351 50020 neutron_17.2.1-0+deb11u1.debian.tar.xz 24e896a546e6e2dacbcd1015c080536fcdc231ac 20378 neutron_17.2.1-0+deb11u1_amd64.buildinfo Checksums-Sha256: ed26c8901fd07a5250323436c3afe952f482fa8e2bc57fa8d1a094deb5364580 4977 neutron_17.2.1-0+deb11u1.dsc 526ebe513911123c3e293eb316d944bb32326c68dd963848b92d6af100234d96 10993216 neutron_17.2.1.orig.tar.xz a43db7695afce38950bea64f7b14dd93cc9ab6a9ffafecf4230702e690038c62 50020 neutron_17.2.1-0+deb11u1.debian.tar.xz 6d0c6cde2115a0bdd07dac4e97d9fd3e583f91b66b4dd05c1cdb692136a13d76 20378 neutron_17.2.1-0+deb11u1_amd64.buildinfo Files: 28e9d83ac1a75c571e2cd8cf3f787a25 4977 net optional neutron_17.2.1-0+deb11u1.dsc cbfbfa0731d5f1ad6d285ab761ed9c94 10993216 net optional neutron_17.2.1.orig.tar.xz 666c735b14fe0f709f08cf31f103655f 50020 net optional neutron_17.2.1-0+deb11u1.debian.tar.xz b6415a47e8346fc3827638a881fb9d56 20378 net optional neutron_17.2.1-0+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmFcax4ACgkQ1BatFaxr Q/7MpRAAlcCXvdtEjx8wN0eOAy8Fb2ErlUd9Obx9dyV7dqb3qabkkMmLZfwuUMDD Hp3czuaU8M/i7/fjvXf2kH4sjUxmXqv0bbKqG8j27T+MzTnuxAndEAYNwfHIM8JH vhUYmisuOkokBMHwsH389fbrRZl7ntIRYn/3BOVx0ea30LQn3lxbacmjKmal/Td3 k+9huFR6ubLv7fZVZldMBDMJwCM3tIUvlcFzZ2FSfgMfGKecXi99p+ET0AxOjTob cuAAvVoyzWCZdgXJJnJSQnT8u7o+7kQDZEJgzUDUvbHGHY6aZ64oJe83XX6gpc6R CdS5HiIUrbqEoX3SS4oMpPVe2/6Tub8wLiHPh6D1gbXyLfYHtQ9LpW0wjwZCrYII W/TkV+fSNu+Xt8zYic5shB5D0IHfTQQ9g5dnqI5Qf6o09T0hA0MQsS6iiZRJzQDe +jJEeeoU+omVvrZXpcDmRBhRQmeDMKzFqr/q3nDRnNxI/YsU6QZD3jIgtjjmMToS G9ThWqfVqoQ9ZZ5ZAm8bieV4paU8KXU51SitWkBPytNzk09a4alAlmkT97LU0gqT TTUYiyuWmt+Gxs8P6pskgHVPaozoqvXhQ6XlsQNzifpYjfPJ2GxymI5wqY9t4gG+ DabVguXkEIAxezoFT7htx1hDw1DN5OK4erHnUTK/Cdn3sgpKI+U= =EECl -----END PGP SIGNATURE-----
