Accepted spice 0.14.3-2.1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Feb 2021 16:29:54 +0100
Source: spice
Architecture: source
Version: 0.14.3-2.1
Distribution: unstable
Urgency: medium
Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 983698
Changes:
spice (0.14.3-2.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Client initiated renegotiation denial of service (CVE-2021-20201)
(Closes: #983698)
- With OpenSSL 1.1: Disable client-initiated renegotiation
- With OpenSSL 1.0.2 and earlier: disable client-side renegotiation
Checksums-Sha1:
ab2f826978b81da91079606571be4df60829eb4d 2864 spice_0.14.3-2.1.dsc
dfbb4bdcbd9f0e0af4dc3a73ac2612e70303b288 18824 spice_0.14.3-2.1.debian.tar.xz
5c4db9d212b0c47518e067beb683726ee8c8d683 5792 spice_0.14.3-2.1_source.buildinfo
Checksums-Sha256:
e584358cc89a4d8a28840132bf74983eac674775a6c74dae3443d766a218fcc3 2864 spice_0.14.3-2.1.dsc
fdc44cd7ec389178b56641ec5a8ac69343095601a8e8ce9507e026a61392ae6f 18824 spice_0.14.3-2.1.debian.tar.xz
730f8b5ed15ae3c97ac346598c3e0c9a506d2324961af4c87b0f4f6a373d42b6 5792 spice_0.14.3-2.1_source.buildinfo
Files:
8ec258f1a7a33c7c3e8a73ad25c98144 2864 misc optional spice_0.14.3-2.1.dsc
53af908b4eafe2be20ba5f968ebfa4a1 18824 misc optional spice_0.14.3-2.1.debian.tar.xz
5f899fc8e02f95f6c00d337e3afb0ee4 5792 misc optional spice_0.14.3-2.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=cUXg
-----END PGP SIGNATURE-----