-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 05 Oct 2022 11:34:10 +0200
Source: barbican
Architecture: source
Version: 1:15.0.0~rc3-1
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openst...@tracker.debian.org>
Changed-By: Thomas Goirand <z...@debian.org>
Closes: 1021139
Changes:
barbican (1:15.0.0~rc3-1) unstable; urgency=high
.
* New upstream release:
- fix CVE-2022-3100: incorrectly parsed requests which could allow an
authenticated user to bypass Barbican access policy (Closes: #1021139).
Checksums-Sha1:
305fbd01040f41ea3dae0db10bc0a213777a7b94 3716 barbican_15.0.0~rc3-1.dsc
ead0807662c8127c3a485bc4462d722da8f1c9a1 490716 barbican_15.0.0~rc3.orig.tar.xz
c309ca01da139f718dfde00c96e843d647ba7c3f 10200
barbican_15.0.0~rc3-1.debian.tar.xz
fdbecc0c78ab242369211dc1ad2fc38bf4ab90a9 21969
barbican_15.0.0~rc3-1_amd64.buildinfo
Checksums-Sha256:
543a11b4dcd643e0437970d01b3cb5b1332c8b1899b8ae109f2dfab029e8fa78 3716
barbican_15.0.0~rc3-1.dsc
9dd0c235aa0eb4dd5152ad961aa82e401566ee32aa0e6c59888648787e13838f 490716
barbican_15.0.0~rc3.orig.tar.xz
d585f154b7718434539b40f50ea025ccdb9d62dd2501c4e1999f1aa35b15c7d3 10200
barbican_15.0.0~rc3-1.debian.tar.xz
335b1f0f52ed63df06a53bf403f32a77d17aae3c78286871bec5b8bfd60f1aa8 21969
barbican_15.0.0~rc3-1_amd64.buildinfo
Files:
8f7b5ba1c9343ceec7dd1dc8bca381e4 3716 net optional barbican_15.0.0~rc3-1.dsc
8e4e03332a4e50edde2a4e480eeef489 490716 net optional
barbican_15.0.0~rc3.orig.tar.xz
906a4befcbc52690f6e542f8f46b9f23 10200 net optional
barbican_15.0.0~rc3-1.debian.tar.xz
d8dcba4f8f1557002fcea98a07c776a7 21969 net optional
barbican_15.0.0~rc3-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=pJrY
-----END PGP SIGNATURE-----
