-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Jun 2025 11:21:22 +0200 Source: python-oslo.messaging Architecture: source Version: 16.1.0-3+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1138848 Changes: python-oslo.messaging (16.1.0-3+deb13u1) trixie-security; urgency=medium . * Add fix-not-using-non-durable.patch. * CVE-2026-44393 / OSSN-0096: oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake. Added upstream patch: Fix RabbitMQ TLS hostname verification (Closes: #1138848). Checksums-Sha1: 55710866b3a21aa04ad8faddbda4deb3f14fb0cb 2906 python-oslo.messaging_16.1.0-3+deb13u1.dsc 1e041ff1b046374496906a18fad1b12007f85b94 148044 python-oslo.messaging_16.1.0.orig.tar.xz 9554eff02375fbbabc027d395f4c76b03ead2551 11612 python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz d15f559d66724a1a6eb25809fd6b89975a9992bc 13177 python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo Checksums-Sha256: a768722f01b8c10e9d1d3d2aa05a712af2faa31a8d9ae870b38e3cdd15dcf120 2906 python-oslo.messaging_16.1.0-3+deb13u1.dsc 032ebc4b1011cb4bc5f69edd0a7426f3e9e9e33b76d475f17d7a36c9bcae43ec 148044 python-oslo.messaging_16.1.0.orig.tar.xz 500fd536b28d0d0932648843011779ce637f3d00aada39ca94bfc4a5fa6b1211 11612 python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz 27da406d32e8cfb6addf1d723dd0614d59270e44e2175d6824cd094397aea82b 13177 python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo Files: abdff89be59f441aa7f55ac1b6ef7cdb 2906 python optional python-oslo.messaging_16.1.0-3+deb13u1.dsc 091b3683775dc9933e90a5df1031ce09 148044 python optional python-oslo.messaging_16.1.0.orig.tar.xz 680784abbfa88e3f49e44630d864d1c3 11612 python optional python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz b8b86ae4b78ba61ebd97c41d4b314c10 13177 python optional python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmopgwoACgkQ1BatFaxr Q/5EyQ/9FnUN35O325IdrajZwXPboyzyG1A4b91QFJ2NsvRHKx+8mzcUWKRXf6wO TCb1S2fiSzsvzwu/7IVtFAmAPCh9oN6FRC78hrBlhCCoZ9XfGxRDFIsqEgo804RI KZJexR5icZ3puMTjd5e5CVY1tml7GtkaLXu9KTMJ37K13jfpOfEy0nIqrej3y1oy ebKIWuUZYADMBsGiWrAqkP/OIZmJ9L0jzNlQIhHbJU5qFv9jZN6FfuHxZ1gBLjAx Dp6YjE/nDRQiFuZnx7yH3Bjmr7EkVcpNoZseaqB+qH2Augu74A5ffIfxgVtErzqB V6Q0ujRKOt3y+Dn8KSTWwzmoLL9/PyokzHfwVVOlM4OXGy8r9QLariQa3kSJkPU6 r8TtJHy/4KEkOouK3yrb3TRNe5POoB6RzGQB+FGk9KMB0DWxA5doiiElT/Wy0M8t leE48ejmPve4N+CKVmRCkxRGCXCygaT/+8XbCGOMYyvwxoZLhRlaMrFkhtjUzN2U JDZMxAPjehNkTrSHxkD/dW1XN6mnWv33vIxBPCsLzoB0f+0eR7ppXEXje0L8RzGq 5xHDOP2qUVoKeGPEqOCBb6LYRZCWDq/grr3ZaaRBWQPwhZcb2z/ppOkzKTmQJ9W5 yar6IDXRKdm8zucdBi9YUcwNQ87kddYvzVvGRMCCCSwCR7bt8tM= =MlcZ -----END PGP SIGNATURE-----
pgpNoNfSwtn7h.pgp
Description: PGP signature
