Accepted neutron 2:18.1.0-3 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 01 Sep 2021 17:00:21 +0200
Source: neutron
Architecture: source
Version: 2:18.1.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 993398
Changes:
neutron (2:18.1.0-3) unstable; urgency=medium
.
* CVE-2021-40085: By supplying a specially crafted extra_dhcp_opts value, an
authenticated user may add arbitrary configuration to the dnsmasq process
in order to crash the service, change parameters for other tenants sharing
the same interface, or otherwise alter that daemon's behavior. This
vulnerability may also be used to trigger a configuration parsing buffer
overflow in versions of dnsmasq prior to 2.81, which could lead to remote
code execution. All Neutron deployments are affected. Added upstream
patch: Remove dhcp_extra_opt value after first newline character.
(Closes: #993398)
Checksums-Sha1:
b19878edadc3a48daf31df74495514294bba2439 4762 neutron_18.1.0-3.dsc
3e61dc3b9342149ff79f6cdeea7e63b7dfe10700 39996 neutron_18.1.0-3.debian.tar.xz
a6bec40e2413fcf5a170ae52f3973e019e60007b 19982 neutron_18.1.0-3_amd64.buildinfo
Checksums-Sha256:
049c759e40112a08af1c3ac7ec0baf0882e56aec21d1ad555f4b524557ef94dc 4762 neutron_18.1.0-3.dsc
42af8b7dc069d73c69ae470f6cffdb42e9883786932f8e6f0b88510ebed53bda 39996 neutron_18.1.0-3.debian.tar.xz
bc95f76293a4f6d3d7203e6f2e31663bb050390d013cf1b937a0ebc0c1d3ec81 19982 neutron_18.1.0-3_amd64.buildinfo
Files:
17c2ce9a03cc6e6b7fa197338a57a714 4762 net optional neutron_18.1.0-3.dsc
6e03682981eea64fd1bbeb83eff21d21 39996 net optional neutron_18.1.0-3.debian.tar.xz
02d8dc2f973f20a816af0909ac0d6480 19982 net optional neutron_18.1.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=UArM
-----END PGP SIGNATURE-----