-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 02 Dec 2024 08:45:59 +0100 Source: neutron Architecture: source Version: 2:25.0.0-2 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1088802 Changes: neutron (2:25.0.0-2) unstable; urgency=high . * CVE-2024-53916: An unprivileged tenant is able to change (add and clear) tags on network objects which do not belong to the tenant, and this action is not being subjected to the rule:update_network authorisation check. Add upstream patch Fix-the-tagging-policy-engine.patch (Closes: #1088802). Checksums-Sha1: 2e88236653cd06cdbd4db989d9f1561dee1e173b 5053 neutron_25.0.0-2.dsc c3b3a9cf286ccec96f35ca619429d3add8a820da 44860 neutron_25.0.0-2.debian.tar.xz 86e1064541c65317be5f0fb9556bf36972d34508 22602 neutron_25.0.0-2_amd64.buildinfo Checksums-Sha256: a363db55709b95ecda62e33ea09a748db3d69b3d455b6849dc600769fa6c765b 5053 neutron_25.0.0-2.dsc 20c1a1d4fed73eed99422c5aa30ea42518ae856a79843fb35adf1e093cea5bef 44860 neutron_25.0.0-2.debian.tar.xz a7fb7f17d2b78062b8d73407b306debe3912c246540275e8f7fae706b0eb5e84 22602 neutron_25.0.0-2_amd64.buildinfo Files: fc95015af0b5392ef63d44e67ffe46ba 5053 net optional neutron_25.0.0-2.dsc a0d5c498f3a9e2faed5b7256a2130b16 44860 net optional neutron_25.0.0-2.debian.tar.xz 54db39609fbabc0be2a43b09eade30e2 22602 net optional neutron_25.0.0-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmdNc74ACgkQ1BatFaxr Q/6fgg//YDHyfg+OED/Fp0GSYel9Z81EiOYYOvrEpLLuMBQeJNvHWu9F9a2xhiXV YzYxO4eEYADjluwtYxBZzc9+nFaBMxM003pn+741wecJKV6TbH7qYl+rUJYOGTO5 H/0A97/Puy0N+h55XEBQBtJA3X0Zo24lmMBs5AjtDy4yb3WZ7xX+vYGCnw7wyq6K S5M377VZE1CNd3kA6KX46dE7bYYLnEOwRZtopor9U84sdK0CY4vpveV9OFZbKSxX xzFxKaurvHHJOergQqpd8f54FSOKwHL7x63x0Tx6O4E/65ddMvjFJE6N3zauszx5 bc5h/kqucTWAHDNnneDZn8RmqPjPDAf5fryUFzdHPBLW5xxJGeWiXWspuh2PKMAY CTpjJft9B/iia8V5LU/sENmzAX2nUXuhO3vKld9cPG9sXleUCoV4o7BM1NVEilzn O4ER7GJAqxWSt3hr94d202U+csWKOfFWw0gUV66HeQRCjN462cJQb7MciqCkWXeW ChVTV/b0RlE1HDkeSlsVeXB2jkdu8S+qaQuxYXDDsLPUtn2O1eUF496mx8kt2nIy kzuk+YvusPkZxusiL2A/EkhxvPVq+SYyk92HJi5J1LIpdB2nPF9edJAJ0MpMgADr xTq3izBaaNvobNN25JPj8HJTzkB6Hi0MAUdKTgyteRMQceDG1oM= =Sz3s -----END PGP SIGNATURE-----
