-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 20 Jun 2018 13:45:57 +0100 Source: lava Binary: lava-dispatcher lava-server lava-common lava lava-lxc-mocker lava-dev lava-server-doc Architecture: source all amd64 Version: 2018.5.post1-2~bpo9+1 Distribution: stretch-backports Urgency: medium Maintainer: Debian LAVA team <pkg-linaro-lava-devel@lists.alioth.debian.org> Changed-By: Neil Williams <codehelp@debian.org> Description: lava - Linaro Automated Validation Architecture metapackage lava-common - Linaro Automated Validation Architecture common lava-dev - Linaro Automated Validation Architecture developer support lava-dispatcher - Linaro Automated Validation Architecture dispatcher lava-lxc-mocker - Linaro Automated Validation Architecture LXC Mocker lava-server - Linaro Automated Validation Architecture server lava-server-doc - Linaro Automated Validation Architecture documentation Changes: lava (2018.5.post1-2~bpo9+1) stretch-backports; urgency=medium . * Security hotfix build for stretch-backports. CVE-2018-12563 - Use requests instead of urlopen CVE-2018-12565 - Use yaml.safe_load when parsing user data CVE-2018-12564 - Remove the ability to past URLs in the submit page * Fix missing dependency on python3-requests, found by piuparts Checksums-Sha1: c2061437aa22cf6eafdb465cdf75aacd21341832 2998 lava_2018.5.post1-2~bpo9+1.dsc 9492e99753aed9ea7d63cf43b641cd5a07aa5636 6089056 lava_2018.5.post1.orig.tar.gz 9d9ffb1b664434481e153395bcf0d57f996916c1 64564 lava_2018.5.post1-2~bpo9+1.debian.tar.xz 65dabbfae7e3935fb641e543affc2f705c593be1 65542 lava-common_2018.5.post1-2~bpo9+1_all.deb 7abf4d66344b9a11002ed13859a46ba2c5ffea2f 65992 lava-dev_2018.5.post1-2~bpo9+1_all.deb cd4287f337fe460ff0bdfd24f63a7c0eb768c5b8 313828 lava-dispatcher_2018.5.post1-2~bpo9+1_amd64.deb 5050c99b3a072ade54bc5b248417c492c1ee59b6 71156 lava-lxc-mocker_2018.5.post1-2~bpo9+1_all.deb ab0b6dd8f4f543a58b8ed2793fd9d292a612ef2e 2208980 lava-server-doc_2018.5.post1-2~bpo9+1_all.deb daeec8ad39e1ea4391107ec029a1ae2f37598f28 611870 lava-server_2018.5.post1-2~bpo9+1_all.deb 719ef2d005268838b51602299bac7950175f785b 61176 lava_2018.5.post1-2~bpo9+1_all.deb 030a10653b878a4f84d09b23086356e5417124a7 10874 lava_2018.5.post1-2~bpo9+1_amd64.buildinfo Checksums-Sha256: fd6e6d3eac8714a5aab4e12644ba6fd8302a9f1c6a2d628506af4abb7e6548f8 2998 lava_2018.5.post1-2~bpo9+1.dsc a8054c9d06debcefc4dcc64728503a724698d4d5aaf3ee98cb1fc4a8ec24022f 6089056 lava_2018.5.post1.orig.tar.gz efe2611924473a1c698b7bb699bfdd3040a117e3a939c30f13e0e155aae15715 64564 lava_2018.5.post1-2~bpo9+1.debian.tar.xz 84e68e8982a255654a8d2882afef63dace84bdcd664970cd4845069e0fc7c949 65542 lava-common_2018.5.post1-2~bpo9+1_all.deb ff061c5bf69f0c04600cad3dc274bccab2e596049e758d39a19455f0c6212e95 65992 lava-dev_2018.5.post1-2~bpo9+1_all.deb 80af78d756e8c2246837774b128c2e07e57818502c565336585ad64243e0cd1b 313828 lava-dispatcher_2018.5.post1-2~bpo9+1_amd64.deb 693c5e9a7e2ae4d9687834a0be4d5062c46ccc2c797c35ae7db8c566ba5b0067 71156 lava-lxc-mocker_2018.5.post1-2~bpo9+1_all.deb 2c507daa445bb66eef49062f9dbb395d86b2a7c6ed05e1a2bfe4b7159f5484d6 2208980 lava-server-doc_2018.5.post1-2~bpo9+1_all.deb d81f85c93cc57529e37fd34db60ca8bbb09190978a5d3d1828e2778cd89c520d 611870 lava-server_2018.5.post1-2~bpo9+1_all.deb 53175484d2de8c87ef4eaefdddc39d57785e7b207fca2b38c9843d154c80ce22 61176 lava_2018.5.post1-2~bpo9+1_all.deb 7b51b5f22023ab03c5ac22e813e582aefc3ab0ff42ab9e3dc2bd0a228dcd10c8 10874 lava_2018.5.post1-2~bpo9+1_amd64.buildinfo Files: 55298a3d01897b11f98381189bb10862 2998 net optional lava_2018.5.post1-2~bpo9+1.dsc e428e45ac0882aa75af45045521b2dcf 6089056 net optional lava_2018.5.post1.orig.tar.gz f1e5c657e8696bbe7b3c6ec5a1cc6458 64564 net optional lava_2018.5.post1-2~bpo9+1.debian.tar.xz 7cb9b04296d87df508bac6a5ce96e1be 65542 net optional lava-common_2018.5.post1-2~bpo9+1_all.deb 3ee2c552e94ac537ab17885408fcf3c7 65992 devel optional lava-dev_2018.5.post1-2~bpo9+1_all.deb 37f76dc6ed43bb67a55e1b89e9c5b411 313828 net optional lava-dispatcher_2018.5.post1-2~bpo9+1_amd64.deb f71afb6f51fde430f952c79b419485f9 71156 net optional lava-lxc-mocker_2018.5.post1-2~bpo9+1_all.deb 17ce5a27efd80aa44a01d10f44d4fc8c 2208980 doc optional lava-server-doc_2018.5.post1-2~bpo9+1_all.deb 8a24bde889a9b10bf964df0d5fdf892c 611870 net optional lava-server_2018.5.post1-2~bpo9+1_all.deb d0b4fdbef43343bf30099391ed916384 61176 metapackages optional lava_2018.5.post1-2~bpo9+1_all.deb bd9da5bb4dee218b5abf85bb7315e9e3 10874 net optional lava_2018.5.post1-2~bpo9+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEf3HB6ceOc10DYMbM8WfkPIFDtoIFAlsqUgYACgkQ8WfkPIFD toJRzA/+NxM5Y9CI4k2Dd52OYvoFy2nRCpBeJ9xLUWz8jleutftUrdwO5+o+433P 4oOlUUhAN0osMUS0tJ+qadOjiTqIo3+8qF6dJHB238NXRZt9r3LbvNVLwDpxOOWK hH1hEUPVLRzP/XAuWDIcKBKCOJ1no3TYFvi48lsW3siWN5FO7CERZbGS4Fihg2mC 3AHTi+8+nMlKKdzIgyU2+atBrRT8KMtKe1ew68uz2kf51WdYFB0TocYHArEexmri MsF+cXFo2yrCGPdeuBRMmFFy99twCyVkBeIUT1IUzobmkTjPqYU46ONVRhXwEZ3n lFh9ShXLJe01mlkf8TUhLBvVMWzqHk/O8AkMf3Jvax3fiKT5NOlzd3t7mCSsB36v okOYez/S3AdaJfDDW37eowVFg6ugLAHvJ9yQKZn8Q0LgMLBtt7ISxl+v0JtA5j6j 4C3wZyBd/HgDl7v0+7ytm3SH5oviGE6X2aNhC6NKI8CgWrPcNWu8dQgNeA/RCVs0 sfAQV321YBxS5M9prHiM37SiiI5rObOwCrYOTWpcynHCq4dEsNjdOjyBeWwJsZJi i3oXow0k1qBAX7CPsQUTQfE9y96Ouh7OzkONAv2Dq7pxopN/s7gTwOOMTE6Y1PMt lXp0lv2vOMAaiFZvelVr4b1bHHJYa/0/CbfWwSpEMmblS//CPUQ= =NZvo -----END PGP SIGNATURE-----