-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jul 2025 14:45:24 +0200 Source: watcher Architecture: source Version: 14.0.0-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1111692 Changes: watcher (14.0.0-1+deb13u1) trixie; urgency=medium . * Add export OS_OSLO_MESSAGING_RABBIT__PROCESSNAME for all daemons. * A vulnerability has been identified in OpenStack Nova and OpenStack Watcher in conjunction with volume swap operations performed by the Watcher service. Under specific circumstances, this can lead to a situation where two Nova libvirt instances could reference the same block device, allowing accidental information disclosure to the unauthorized instance. Added upstream patch: OSSN-0094_use_cinder_migrate_for_swap_volume.patch. (Closes: #1111692). Checksums-Sha1: 9f0a111f452d4daec5c24c3b0c87c5802d686a0b 3705 watcher_14.0.0-1+deb13u1.dsc a76e9a73c8070f885116e9699120d86d436487b8 907780 watcher_14.0.0.orig.tar.xz bced04ba1c75a9f59f4199a6db87577e16adb64a 14996 watcher_14.0.0-1+deb13u1.debian.tar.xz 7d92c20be7bf827a8b56d0e087c02fcb226fcf44 18349 watcher_14.0.0-1+deb13u1_amd64.buildinfo Checksums-Sha256: 53a8194010d1c8c0dd4932f9d71f1dc25ce6cbe3b1e97da804aea7c60c54b3fb 3705 watcher_14.0.0-1+deb13u1.dsc c6076687dc2f162c057798821bd450e1081b744765b4255abc7cccbe9200d5dd 907780 watcher_14.0.0.orig.tar.xz fc9917b69913a9339b030ffb231b5a2615eeed87aeafa3078c7fc6e20e335ca0 14996 watcher_14.0.0-1+deb13u1.debian.tar.xz bc7e522c1999e07dd304d077e94e28941db36891854250c7a442bc7dd995942f 18349 watcher_14.0.0-1+deb13u1_amd64.buildinfo Files: b70c9dfa8af46771fee94e4599ca0614 3705 net optional watcher_14.0.0-1+deb13u1.dsc bcf70d9f55c78234f301b44256f02f44 907780 net optional watcher_14.0.0.orig.tar.xz 87890f2d1496a1d9e1b9ee067627f134 14996 net optional watcher_14.0.0-1+deb13u1.debian.tar.xz c20656ccfd46b5d7e5c075a47026883e 18349 net optional watcher_14.0.0-1+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmkMY54ACgkQ1BatFaxr Q/61/A//VN32f7TAK96Mo2kBq4wyACTuuCbSZdw89+mDDfHQARCYoL2ZiTGACoqD slNrdW/HQimtzEjEGFxatK87PmkQ62Fy29sAbJQbJWbF3IHKWZfOro+CgseMFOEW JYXj84v5qgy01LT8gPp8s/VdEoDV0dTRBwIG7wI65qmpOg5VN0T108EhybpwpDfj CZkmzisCaTn8c3Az75GhtxWXK30Ojgkx4JRpx1iXUef1zDq6eYASPg7I+Oa2/QHR Ul/rXXlcJWIEUGw/YBrZ5fwkQWRYnWrSEHdbAzYZ3nrDL+Pt+MwMMGdY/U5Ymjvc OeRL7qpHdRp3FDMvTwf+cQTRiE2bgPPDHwci930fn1kbHa1cPt5YZR7HX4ql8Tba zWZWuags78ey89UgG6b9l35HQXrv5ugtGyF29vHDEu+r/xeOCogk0Du9PZVCrspd IyRrsWVftkME7V/YeXJsRlgdoGh2WCjNoAomalku53l9rtCZqiEhZEsLFq58nOit 4p5FkJopSVADXGWGRNYcENHbVdPX9IjSOBOAwXEp36MdiCJfzLZwwzD9owPJJHPc 9ZxL+c3UX6eIG/WOemxkfd6NDQyMk7kYkxusdj2KijSLCZ/ubJFAhfGIOgjIJDAg 3avPf5D7Up2/Q1FFCb7IoFn2qpA5RZrNiHnE2rgeC41I8YqrxhA= =DbeL -----END PGP SIGNATURE-----
pgpnLbmkwE2T6.pgp
Description: PGP signature
