CVE-2016-7404

Related Vulnerabilities: CVE-2016-7404  

Debian Bug report logs - #863547
CVE-2016-7404

version graph

Reported by: Moritz Muehlenhoff <jmm@debian.org>

Date: Sun, 28 May 2017 11:45:01 UTC

Severity: grave

Tags: security

Fixed in version magnum/3.1.1-5

Done: Ondřej Nový <onovy@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, PKG OpenStack <openstack-devel@lists.alioth.debian.org>:
Bug#863547; Package src:magnum. (Sun, 28 May 2017 11:45:04 GMT) (full text, mbox, link).


Acknowledgement sent to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, secure-testing-team@lists.alioth.debian.org, PKG OpenStack <openstack-devel@lists.alioth.debian.org>. (Sun, 28 May 2017 11:45:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: CVE-2016-7404
Date: Sun, 28 May 2017 13:43:03 +0200
Source: magnum
Severity: grave
Tags: security

Hi,
please see https://security-tracker.debian.org/tracker/CVE-2016-7404

Cheers,
        Moritz



Reply sent to Ondřej Nový <onovy@debian.org>:
You have taken responsibility. (Fri, 02 Jun 2017 07:21:07 GMT) (full text, mbox, link).


Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Fri, 02 Jun 2017 07:21:07 GMT) (full text, mbox, link).


Message #10 received at 863547-close@bugs.debian.org (full text, mbox, reply):

From: Ondřej Nový <onovy@debian.org>
To: 863547-close@bugs.debian.org
Subject: Bug#863547: fixed in magnum 3.1.1-5
Date: Fri, 02 Jun 2017 07:18:43 +0000
Source: magnum
Source-Version: 3.1.1-5

We believe that the bug you reported is fixed in the latest version of
magnum, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 863547@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Nový <onovy@debian.org> (supplier of updated magnum package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Jun 2017 16:31:39 +0200
Source: magnum
Binary: python-magnum magnum-common magnum-api magnum-conductor
Architecture: source all
Version: 3.1.1-5
Distribution: unstable
Urgency: medium
Maintainer: PKG OpenStack <openstack-devel@lists.alioth.debian.org>
Changed-By: Ondřej Nový <onovy@debian.org>
Description:
 magnum-api - OpenStack containers as a service
 magnum-common - OpenStack containers as a service - API server
 magnum-conductor - OpenStack containers as a service - conductor
 python-magnum - OpenStack containers as a service - Python library
Closes: 863547
Changes:
 magnum (3.1.1-5) unstable; urgency=medium
 .
   * Team upload.
   * Fix CVE-2016-7404 (Closes: #863547)
Checksums-Sha1:
 0693d26a0da51850726fa148fb25bb90f06ae08b 4020 magnum_3.1.1-5.dsc
 2388f23f57de42a1121ee276b9bb9f8ab243bca5 33132 magnum_3.1.1-5.debian.tar.xz
 0bc5616e449d2a95c03d8de1af62e355c44f5b86 27742 magnum-api_3.1.1-5_all.deb
 0a23a466b039389aa63d7220965ffe22210f6772 39068 magnum-common_3.1.1-5_all.deb
 c44f82b6b3d6503412872f6af0b1c1ae482682a0 6280 magnum-conductor_3.1.1-5_all.deb
 4b8c692e34df6939d3fef21ac32c3fb1fd188cac 16588 magnum_3.1.1-5_amd64.buildinfo
 308485c6a18d435b2f576306e8082c43b536f030 184980 python-magnum_3.1.1-5_all.deb
Checksums-Sha256:
 d35d53c3b538b5901894618e3a7ef46eb1e0b31f1559f6a36cfd1d2bbcf2d81c 4020 magnum_3.1.1-5.dsc
 89e1339eaa6e5b7d09aea80da69f5d4e451f2654234df450ac22282a0b65aa93 33132 magnum_3.1.1-5.debian.tar.xz
 291ba0a604076c9c4041114e8bee2551b2b2adb8a5d561776111c945916d5279 27742 magnum-api_3.1.1-5_all.deb
 a816708af7411fd3b33851c29b39c9e28cd1ee3e24477bcf11849a488dc45ae6 39068 magnum-common_3.1.1-5_all.deb
 c7643f17c15a892ca98b6a624cb30cf148da3b84565334e58e3695d97df6efb3 6280 magnum-conductor_3.1.1-5_all.deb
 be4689d88ff33bfe1a8033aae90c691467665f1c42b215b7fb442f186aadb30b 16588 magnum_3.1.1-5_amd64.buildinfo
 b8cf8cc16922ee4b6e135a99bdb63869e263c2c6e01782cd23dd2e7774ca5562 184980 python-magnum_3.1.1-5_all.deb
Files:
 b9b51740e8ce5462713c09be09f4c12e 4020 net extra magnum_3.1.1-5.dsc
 e2d048a83d2aeeb412e6783aa553a9cd 33132 net extra magnum_3.1.1-5.debian.tar.xz
 a7f2ab5b745916bb143f6aafe8eecf83 27742 net extra magnum-api_3.1.1-5_all.deb
 0919c2fe0cfc26b82b06568bce63dcb9 39068 net extra magnum-common_3.1.1-5_all.deb
 cc50efa10336b3caaea5c8e4ae4c2810 6280 net extra magnum-conductor_3.1.1-5_all.deb
 51209084d894aa80977b677091865174 16588 net extra magnum_3.1.1-5_amd64.buildinfo
 3a7ec2ed0254fc5d26dc7952b090459c 184980 python extra python-magnum_3.1.1-5_all.deb

-----BEGIN PGP SIGNATURE-----
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=ISYi
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 16 Jul 2017 07:42:05 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 16:11:45 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.