-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 31 Aug 2026 22:49:17 +0200 Source: glance Architecture: source Version: 2:30.0.0-3+deb13u4 Distribution: trixie Urgency: medium Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1146594 Changes: glance (2:30.0.0-3+deb13u4) trixie; urgency=medium . * CVE-2026-71196, CVE-2026-71197, CVE-2026-71198: Multiple SSRF vulnerabilities. Applied upstream patches: - CVE-2026-71196-71197-71198_1_Properly_limit_web-download_image_f....patch - CVE-2026-71196-71197-71198_2_Block_restricted_addresses_in_web-d....patch - CVE-2026-71196-71197-71198_3_Pin_import_downloads_to_validated_d....patch - CVE-2026-71196-71197-71198_4_Block_restricted_hosts_when_adding_....patch (Closes: #1146594) Checksums-Sha1: 753f5715d8a5c303b18d7eb25e394ecf6d7e7858 3725 glance_30.0.0-3+deb13u4.dsc 627c3e03650efecc1df104428d439b2edb9200c9 45244 glance_30.0.0-3+deb13u4.debian.tar.xz 52adbc8da62d7be40a488c7207d3082a4efd2115 19701 glance_30.0.0-3+deb13u4_amd64.buildinfo Checksums-Sha256: 556505e7b822a2cae72b2fe1105b260785067ceefe5a92b2d056e6b00b4783d3 3725 glance_30.0.0-3+deb13u4.dsc b007a2a80b4e13a14ecf60c08ac281f74f6f792d63583cb6c9f4200acd44d0ab 45244 glance_30.0.0-3+deb13u4.debian.tar.xz d5be40228964855c788b325baeb85b5d7d53a87d623f830d4cbd117c06f5de3a 19701 glance_30.0.0-3+deb13u4_amd64.buildinfo Files: bbca0a1ac99b5e06ebcf6b8a83c410bf 3725 net optional glance_30.0.0-3+deb13u4.dsc e32ea403b2740b0d4b7a49ebf6777829 45244 net optional glance_30.0.0-3+deb13u4.debian.tar.xz 3d58b8bc151e5495bb5edcdb19317782 19701 net optional glance_30.0.0-3+deb13u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmq5l8AACgkQ1BatFaxr Q/6TWw//UpOLiPagoWukEr8LpHmk9zLsOOmgv3ZgkDzUfDxGIDoph9WaJQraTYii 5rBD2Mv52fPU6gX82Xao0mv9IVOHRPU1IM541xdMOvCGVMjVZya3Pf9rO3oiGxVT QACWSjwenP5oR2Hfuj6shjokVkNS0dq27cJhzAR4/HE5uiUPLGHKI9V319FgqjnQ 4hM92fBJ9e3yHh9b4jHjmnYyn1mevV124ltUXxuAq1S2g7wLtbxPJSG0gm+8O15P /il8uUaahGlQYXGkS9j3OWH/PtDVqnmX3c8bgBnW1tl9GckmBQhp8E5CwfprgA/H S2zpZQAEodhGezn7M76zfKyyg16cuRNtVtM5W5YkHl5if86BP7HN2QV5UHRuS0K9 dbYf4G7ixz4Wv94S+ByrQhzY3XwSrDx9Qe3oSJTA18dc1mcp+sdfIAEGZfRyZ8x6 Bhx4Xzv5zse36YxmpxDuxCsfjN8X/Ls9HsoemElZj/DdejlxWYpfb7MekQ1z5VKy WweK7dkHG5dTa8/qIFnzcCHpGVIrdEVrgLt3Cr3XMKz0aBPJq2aA2VcIaDlAaxLt bqMFM174TRPmgYjzbUsDfTfv4LMBGsyC90QUqLgw53aULZrIetOzb7CxwK4RRsCG NIM1RUgvcu+1EFAJ5EtiIkMmuzP+oGwQX0IRosAwmy21EuJWGio= =TAeL -----END PGP SIGNATURE-----
pgpZ1pmZZKrIc.pgp
Description: PGP signature
