-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Oct 2026 12:06:42 +0200 Source: octavia Architecture: source Version: 16.0.0-2+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1144814 1148175 Changes: octavia (16.0.0-2+deb13u1) trixie; urgency=medium . * CVE-2026-74248 / OSSA-2026-035: Unauthorized QoS policy deletion lock. Applied upstream patch: "Fix QoS policy validation to use request context". (Closes: #1144814). * CVE-2026-94572, CVE-2026-94571: Octavia is vulnerable to an RCE in its amphora via the Octavia API. Added upstream patches (Closes: #1148175): - Fix_HAProxy_config_injection_via_tls_ciphers_field.patch - Fix_HAProxy_config_injection_via_L7_policy_redirect_URLs.patch Checksums-Sha1: 420fe214d9fbe39cf2258adbb39d70d0f851b702 4273 octavia_16.0.0-2+deb13u1.dsc 189f65b81567e2034400a4cc5d788384c991eed1 25356 octavia_16.0.0-2+deb13u1.debian.tar.xz e4e2af7134776f258447b04ecfb7e1afbf0d4853 22395 octavia_16.0.0-2+deb13u1_amd64.buildinfo Checksums-Sha256: 040b79c7581b1a4a4cac28693606d84b6bf70654241f9a6b1d5009861fd6f373 4273 octavia_16.0.0-2+deb13u1.dsc 009917657737450091d5c59d8d91fe26489a16db0d827a64c6c7517eee0a96d0 25356 octavia_16.0.0-2+deb13u1.debian.tar.xz d71a58a7d31caf6d1edcb4885bac0391e76e511dbd72e1c504cce6600a7577c2 22395 octavia_16.0.0-2+deb13u1_amd64.buildinfo Files: e197504cad145a587dc559715c4756af 4273 net optional octavia_16.0.0-2+deb13u1.dsc 84b94dc0ef66dd462e1c62fc0868bf77 25356 net optional octavia_16.0.0-2+deb13u1.debian.tar.xz 7b5c3e4d9f91cba0557446958c8db386 22395 net optional octavia_16.0.0-2+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmrOBlsACgkQ1BatFaxr Q/7muxAAgwFF3CPlXGPJENGH7ttsCA34b74UQHEGxJjDEXwC/Ar4ZZqVaedOT02R oCEje+8F6nSz2ndX/lP5duQ/T0cw0kH5wQS7GR0BiHxdfOpS9IEN3Klsy4QBPJc/ qfgGIBk6JEF+N3adENnthwR9nBiRB/IYxyJ4Gbh5mp9So5qaKPYwVZuLgCYCnLAk sV1lNG1kqyOmpVdLqCwFvjnPuZPMV/j4mto5AzPq1dTWsGHakO2LO1dlg8q52B/w jS/Hg7nYBbrKZI5oePMKknbsqWZTyo8XI7SH6hSyrYwK2dgYdtDtvmr8WGGQ2VTt 6CXk0aXj30z3KOeE+j6bDiDJVn+JnOxN8TB8PJ4PLaCAkOwqdkBMRcUMQ9Hz9bgD mY7typhQoNU8Mf20hrjRMRGsNAh/HW0QllyobUgbqsClolBdgmqLoixt81dO0W+4 CbNY9/LnKCDZa7LsuobURjCUFAia0z8lD1FxDLzHHnHxjq5FWIx/zvWMTJOznY/o 3V6tG9emtaZi1f7eQl+uuuMzRUgUacCgHRC9KmkUR0iw+UxyvqeTZ7Vz5EMF7/Tk MDIWOOWoaS93EAaGksG2bjOKwZM8dmd5FBds+JYgZrWQL/MLQG50lSd73EIfTm2R YqNBYU0NtdRzxsZRkhZY0PmponHF0CICpqhdIUhDBW6rPrspRLU= =E4sz -----END PGP SIGNATURE-----
pgptiX9sEMKWG.pgp
Description: PGP signature
