-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 21 Jun 2024 09:35:02 +0200
Source: glance
Architecture: source
Version: 2:28.0.1-3+deb12u1
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openst...@tracker.debian.org>
Changed-By: Thomas Goirand <z...@debian.org>
Closes: 1074761
Changes:
glance (2:28.0.1-3+deb12u1) unstable; urgency=high
.
* CVE-2024-32498: Arbitrary file access through custom QCOW2 external data.
Add upstream patch (Closes: #1074761):
- CVE-2024-32498_1_1_glance-stable-2024.1.patch
- CVE-2024-32498_1_2_glance-stable-2024.1.patch
- CVE-2024-32498_1_3_glance-stable-2024.1.patch
- CVE-2024-32498_1_4_glance-stable-2024.1.patch
- CVE-2024-32498_1_5_glance-stable-2024.1.patch
- CVE-2024-32498_1_6_glance-stable-2024.1.patch
- CVE-2024-32498_1_7_glance-stable-2024.1.patch
Checksums-Sha1:
288a585b099fb6bb2d47b949d64e1edb3184f085 3769 glance_28.0.1-3+deb12u1.dsc
220d4f9e62f3da625f3f0d332ff42117f0f0e90e 28028
glance_28.0.1-3+deb12u1.debian.tar.xz
0f73fc2459fa76c3601d087a608168a811204b34 19410
glance_28.0.1-3+deb12u1_amd64.buildinfo
Checksums-Sha256:
8ef2709c3a5bb7aee92c00e680d25c08398f0648ca02a3407c124aca16818833 3769
glance_28.0.1-3+deb12u1.dsc
39d080772bf21519e2d1602a2dfc91e15f5a2ef7d5fec69a5781a13ceaf1b672 28028
glance_28.0.1-3+deb12u1.debian.tar.xz
fa3809b74456316445674965e2860742fb32fd0b95a6ec639858f52facbcb356 19410
glance_28.0.1-3+deb12u1_amd64.buildinfo
Files:
d3f7e9b9160ff4583c3586e814c383f9 3769 net optional glance_28.0.1-3+deb12u1.dsc
e0d93830cb3c6a2fb0a592333cf93c3b 28028 net optional
glance_28.0.1-3+deb12u1.debian.tar.xz
3bdba3c0895e1f1566da9d1abe086757 19410 net optional
glance_28.0.1-3+deb12u1_amd64.buildinfo-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmaEFnAACgkQ1BatFaxr Q/5T/BAAgXTdUOismaegXqpXvAQJhN+d9q2C7vY1UVHHWH24fezrz6TYq/HUPVVU dAXgehiHoAa6hjunKx6mhWUbqcclDewDFnaE4oVNLTp1JO7TYcRu2P8i1FgIqsVa wgVahmdTlumTGLectefLINTO4bLVZQM+m1tVyPU6rzq6yCh22riQKS24nD1iPBtC 4V/fOHolgaeAMUi65Wf6JdihAM4/IWprCAzDAjBEMLSphOCxAKyklzkbRN014QG1 Je34X0Fixl8vAancl4AKITf9KMKLYM/x3SfotSbCOk17wbCdg1MK+XO87dWooXM8 k8yp86CaGHiM/L+a1xvbcbBgaeRRYt8m4Daqg28d67rRlrePlw5r+RdxDWJUBojY WuYfBvtRZWqhsOzAsgzdu1iv8NTWrIj1s8dDBi5iWPWAvaMhwh3Z7sMzXY4ogdcO o313jTpki6ck/hIujJpTAFJLpnLmihiztlh6dlKuANnNkmMu8Wks8RMMp5XbH5uz lWdFtvtwOFjzA6j0FjrWAONbMJc+NB808AT4akR8hpmOBoN9znsesQ8oh4ScR1DR ab2JIkFvTwb6OozzbHMs2qbZiWjO5V22TmoCdlfU4F8uSRt+39zGT0ACMw5ITs+y lKVOMVM2v5K/8X7UZkxOQP/3lYXgZwYucasr4udYuNxgLRHy0IA= =1/l/ -----END PGP SIGNATURE-----
pgpv3NYsxy61_.pgp
Description: PGP signature
