-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 27 Jun 2016 19:34:34 +0000 Source: murano Binary: python-murano murano-common murano-api murano-engine murano-cfapi murano-doc Architecture: source all Version: 1:3.0.0~b1-2 Distribution: experimental Urgency: medium Maintainer: PKG OpenStack <openstack-devel@lists.alioth.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Description: murano-api - cloud-ready application catalog - API server murano-cfapi - cloud-ready application catalog - Cloud Foundry broker murano-common - cloud-ready application catalog - common files murano-doc - cloud-ready application catalog - doc murano-engine - cloud-ready application catalog - Engine server python-murano - cloud-ready application catalog - Python 2.x server code Changes: murano (1:3.0.0~b1-2) experimental; urgency=medium . * CVE-2016-4972: RCE vulnerability in Openstack Murano using insecure YAML tags. Applied upstream patch: Use SafeLoader to load yaml files. Checksums-Sha1: 0cc4670728d74ee67d631dce1ca7a7f9ab9986bb 3924 murano_3.0.0~b1-2.dsc 0aaa65148f639a162d1a2e9aa27e5e0006704d50 17048 murano_3.0.0~b1-2.debian.tar.xz 645dbea502f96bedcde2550973d85364b9e2e143 22934 murano-api_3.0.0~b1-2_all.deb f02a9caefac15f58f022fe5976d55f6fbfe36987 7136 murano-cfapi_3.0.0~b1-2_all.deb 9ab3baa25ef1f6883390c237c85347e7f783341c 73824 murano-common_3.0.0~b1-2_all.deb 5fc6dbea550b9cc8980ab03cf458883c88ff9479 3694634 murano-doc_3.0.0~b1-2_all.deb f41319b95438d1bd679c70575ba98b4a14e6bac1 7378 murano-engine_3.0.0~b1-2_all.deb d8ffe00e71e4e96df1ac07276bceb9ad8d2932f6 217362 python-murano_3.0.0~b1-2_all.deb Checksums-Sha256: 79daa697e951a517dff07f0ba035b0ef1246b125343161ef991df1a63df8978a 3924 murano_3.0.0~b1-2.dsc c4c9d9471e02766c17c53e4e36024ba3d3834da3315567070c9c5b5f28fc9201 17048 murano_3.0.0~b1-2.debian.tar.xz f85a537cfd525f7dd92a25669329f503c2a0d7537b6eb1ce186223fb84cf243d 22934 murano-api_3.0.0~b1-2_all.deb 7f6a7c6dfeb7a75598ccd43f6a6e3cb34fb8e6c5384cda3bcd96cb8b77dc4472 7136 murano-cfapi_3.0.0~b1-2_all.deb 1d50a947b99eefdf8091178077a927e8473f6a58b9b3e4a8b592f9c38e2ad955 73824 murano-common_3.0.0~b1-2_all.deb 70cc57644a4e52028d34f2ef405cf9a58bc6a656f61a8e73dc4e295890d42cdd 3694634 murano-doc_3.0.0~b1-2_all.deb 2741917c175c16cd67a8395b1dfadca339af3f0450b0c152f8f18e4249415512 7378 murano-engine_3.0.0~b1-2_all.deb 12ef568d5703021c8da39e1151c455edbe418b19016e50b7b9fb1c8f1b896598 217362 python-murano_3.0.0~b1-2_all.deb Files: fd3168b7fc81bb7aecb9eefc2d194c7f 3924 net extra murano_3.0.0~b1-2.dsc e2a6ccaadb3f564b5cfc289fd4fc3bd2 17048 net extra murano_3.0.0~b1-2.debian.tar.xz d5485160c9481d208c8e16ebfc03ae70 22934 python extra murano-api_3.0.0~b1-2_all.deb a03fe7bfb2b16588fc6f94d721447469 7136 net extra murano-cfapi_3.0.0~b1-2_all.deb 7725796368731701b7dba802edd0dbcd 73824 python extra murano-common_3.0.0~b1-2_all.deb 99b92b582cea25bb6ca829b7f55d8575 3694634 doc extra murano-doc_3.0.0~b1-2_all.deb 21feb6fefc71cfe6f7247230ae8067a2 7378 python extra murano-engine_3.0.0~b1-2_all.deb bfb7bb72ab0320870053c9650564abc8 217362 python extra python-murano_3.0.0~b1-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXcYDrAAoJENQWrRWsa0P+W9sQAIDzKtaJqNW+jLYKqQeKc+I5 Aq9o0xI7JUVsWuF0ljtmhX5WKSjVqJMMKwNWAzcrMxtPF1PiDI5No6zbNBcjeuzE smuTJQXiIWYs9UnajTjkfUpdt2lt8OcAhh+Wd38u8yZs6+k3gibxfpEsFCzjeiWE KCTC8u2lJJ+Uq3iAEgnndcaU95arwIMzdKfntxBLlYgA0ErXZ1sBs/a6UJFoVKv3 O9qyoX0t/awKqkZOJGMckBohk2cJC+rfGqTcXar9mRvJyWbGi6aZD2yv711MKMhW 00mT/gubSY2FS0zeRgXJILYN19lsJ4EEZJtM2VtsLobH3FXGXq4hU83jalypa+xC 1wmpFQyhMmGxR/6knc3jjqiYNBudOvHmnKfbtCq3wxKLt0LzNxz6Es+GX61uqC5O VM1XqRM9+Ogo7MbkB5/BBR24LtQ1/v1m8vszhnr3uWLdqS4brFhGH09Tmo5r9AwW CL4UYoU+PC+BGA1T0TobxJeGd42rDpCKYcDWP8+1dvi7l2MS2hEPTfDWNpdChMLj a8tpak0Isc7UpcBBS99c+IDrgRUUP0f2mZs/DW7NaQAn+DQgbSsBbVLUwT2orzUA nKvXwJnT6G6LY5LiU1r25oprQq+GbM1IvqNgpigjv5GNRt0Xhs2Fu/uIX3CrtaLA hhkv9tQZkH9ehL3Ja1WF =IATx -----END PGP SIGNATURE-----
