-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Jun 2026 09:16:13 +0200 Source: nova Architecture: source Version: 2:31.0.0-6+deb13u3 Distribution: trixie Urgency: medium Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1140149 1142113 Changes: nova (2:31.0.0-6+deb13u3) trixie; urgency=medium . * CVE-2026-46448 / OSSN-2026-022: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints. Applied upstream patch: "Strip internal _nova-prefixed scheduler hints on create" (Closes: #1140149). * OSSN-0101: Nova console WebSocket proxy Origin allow-list poisoning. Applied upstream patch: "Fix mutating global config in websocket proxy" (Closes: #1142113). Checksums-Sha1: b47512ab08f6e010c5b485c18ee1e4d75d8acca0 4854 nova_31.0.0-6+deb13u3.dsc 9bfd90e7c79db45773b7ef1a24814974c9a0aa62 6124328 nova_31.0.0.orig.tar.xz 744ed20fa65dea737b9b5401983f9ab816f38f05 75008 nova_31.0.0-6+deb13u3.debian.tar.xz aa1e9d548efc97e0a495ed145c4bbd8edd689b70 26713 nova_31.0.0-6+deb13u3_amd64.buildinfo Checksums-Sha256: 83d30fb3bdcd6db50c2ecddf4c1c24c7f51f53f860724eb5389a0ea6efdfff43 4854 nova_31.0.0-6+deb13u3.dsc 51662e6eafcb3a278f6629683494094f587188fda4e8812ab23709a30dc579bc 6124328 nova_31.0.0.orig.tar.xz 6b2b926923a453756324c561ea0542aed5124e850831b0fd0613169b37ecbd53 75008 nova_31.0.0-6+deb13u3.debian.tar.xz b8789c5ababc381378d2cd2f46cc7d60e0cfe3e1a1330e84a66ef557f905298b 26713 nova_31.0.0-6+deb13u3_amd64.buildinfo Files: 51bf8883f324076bb80f2eae46ca8afb 4854 net optional nova_31.0.0-6+deb13u3.dsc 3d75440c9b58a64b74b46a13a74c55ce 6124328 net optional nova_31.0.0.orig.tar.xz 4fa0942fd544d1115ef64046539d80bf 75008 net optional nova_31.0.0-6+deb13u3.debian.tar.xz d00a232f03ad2e58dbe23075531eea80 26713 net optional nova_31.0.0-6+deb13u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmq1OIYACgkQ1BatFaxr Q/7rTg/8C2NjqtaXI5z1lHUBISPcpguHl8yPH66Nxd3oNAlhE7EtQ5mvkFhFlAxi 9weKg/8skNLZNdkUabDJPtXwcvzQ7NsHmLybyatg7iyRO97BYQ10sieK5C8He8Kj XGWFI01OR88kvwLrQfY89iBXArqgfE8r4HiBUhwxVfrJ/4lXzTocb4ypYDE/YdyN +ab40lMenfqCgbY8HDY3Mjknd4TCzrUD9ih9JX8x8bPvf0M3s3XyLPI0V3qx9W/Q sGcxp8lW3diaY9mRzmgteqiRI0cOT3/z+UaLki+ejZNfZ/jdVHwnLbUWR8cto/M3 9L0/M2hbjNs9tYseiELiVv9uid9SJmtbOjls4Q8adqMuK/ui3e7ozCyqQShnF3Px NWZfqeGOvmBzp1Z2ONmdw2cIiHzhyGL44W3TpfHVlghxwPsj09E8JzO78l093OlB DtGdr8R5L6YpDStYYlRROJSBMDgGxPImkQwx6NG9YRCycjyXcsSgNIfIlfnmiETe rlsoHgJsuxsTKPkbnLOHjE7PNCKNRGNMpJkkk75AsVn5eMnbdWcXtVhO66Jdy4lS OYdm+aq+NeQmj1SLvwuddPBJD+LPKiloX2Pv1710Pa8O1rkWQ3WBgr1RYhoGANXz q8/8LnmwFtwyM3IxZ25DaBzC+SFNI8QmdBv/7UML1kRJPZC6qMA= =2JCY -----END PGP SIGNATURE-----
pgpTKyoHzY2ms.pgp
Description: PGP signature
