Accepted rabbitmq-server 3.10.8-3 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted rabbitmq-server 3.10.8-3 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Mon, 27 Nov 2023 08:36:33 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: rabbitmq-server_3.10.8-3_source.changes
- Debian-source: rabbitmq-server
- Debian-suite: unstable
- Debian-version: 3.10.8-3
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=qDDzreV5ZlkmFyN0FKJQ9QQwSgTiwGTCnVRgWQHSWUM=; b=Yiuuv8M+4QZookSvSxiaCCsmt3 Vi2zLD3zH+iSopfzuSD28VkPrD0TlDr0Xo7qkefmC9uguB730EqllYuCeoVA0OfDC3xU2os/hDa4n QWVAGo6RfvCq0/DpDW8mGJEWv0GVswuK49QJv5QldmVx8UpdH7sDSGIiQj2+1Cihqm+sxywRItdHh 7jRO99aFr9ah/2BuGUaZ8wkdfrOL1zkyR0yEJeWv3+rjLVOng0KJpL09dSKTeqQqAU1tfSF70gMOH OgLaCO8jdoJz6GiJUVRn5jxz/1uxjDOVhOmIFQZihSfOLpw5cDAfWSIyNW2LthxChV/UQ3KIx/J86 lML+OzIw==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1r7X6X-007xZt-He@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 27 Nov 2023 08:31:07 +0100
Source: rabbitmq-server
Architecture: source
Version: 3.10.8-3
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1056723
Changes:
rabbitmq-server (3.10.8-3) unstable; urgency=high
.
* CVE-2023-46118: Denial of Service by publishing large messages over the
HTTP API. Applied upstream patches that introduce a limit of 10MB:
- Reduce_default_HTTP_API_request_body_size_limit_to_10_MiB.patch
- Introduce_HTTP_request_body_limit_for_definition_uploads.patch
(Closes: #1056723).
Checksums-Sha1:
104f80621b1bca34ea03492bdab451692e8d6068 2695 rabbitmq-server_3.10.8-3.dsc
d03e53b4ecb16820a8cb0b3540c7e50e6f722017 26496 rabbitmq-server_3.10.8-3.debian.tar.xz
dd5a91367b45c68c4918ce979120befb513d05d6 8414 rabbitmq-server_3.10.8-3_amd64.buildinfo
Checksums-Sha256:
d20de92468934be990e85c747309ff15ac76534554e6c30eb812fd304f3e5704 2695 rabbitmq-server_3.10.8-3.dsc
18eaac8005726774649f77676c71beccd0790a3998f58ace27e250acea542c3d 26496 rabbitmq-server_3.10.8-3.debian.tar.xz
8c23cffc52fe5fb98dc149ab56115d17732cdf68284512a1a79b1e193187ecff 8414 rabbitmq-server_3.10.8-3_amd64.buildinfo
Files:
e4e92c267dc3fc6acbc4a9adea6d68c4 2695 net optional rabbitmq-server_3.10.8-3.dsc
d852f03566501448fd8d73919de457f8 26496 net optional rabbitmq-server_3.10.8-3.debian.tar.xz
525a17c92c0225dc2dcbd7531f7fbe28 8414 net optional rabbitmq-server_3.10.8-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=dBLw
-----END PGP SIGNATURE-----