-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 23:15:31 +0200 Source: manila Binary: manila-api manila-common manila-data manila-doc manila-scheduler manila-share python3-manila Architecture: all Version: 1:20.0.0-3+deb13u2 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Thomas Goirand Description: manila-api - OpenStack shared file system as a service - API server manila-common - OpenStack shared file system as a service - common files manila-data - Manila storage service - Data service manila-doc - OpenStack shared file system as a service - Doc manila-scheduler - OpenStack shared file system as a service - Scheduler server manila-share - OpenStack shared file system as a service - Share server python3-manila - OpenStack shared file system as a service - Python libs Closes: 1151439 Changes: manila (1:20.0.0-3+deb13u2) trixie; urgency=medium . * Add /usr/bin/privsep-helper to the sudoers rules: manila now uses oslo.privsep ("sudo privsep-helper") instead of rootwrap to run privileged commands, and the share service runs as the manila user. Without this, the LVM driver initialization fails with FailedToDropPrivileges and manila-share never becomes available to the scheduler. * CVE-2026-71195 / OSSA-2026-046: Manila allows cross-project public-share and export-metadata changes. Applied upstream patch "Fix policy control for public shares" (Closes: #1151439): - CVE-2026-71195_Fix_policy_control_for_public_shares.patch Checksums-Sha1: 7a7c755ed36de5e9dbbffd643b158f63d4f9612c 28404 manila-api_20.0.0-3+deb13u2_all.deb 5625c609acf7cf5e5fff6cae08de6fdb4c435dd3 68380 manila-common_20.0.0-3+deb13u2_all.deb 4670cfa9927bfdded3c8d0435002518cb0dc80dc 9468 manila-data_20.0.0-3+deb13u2_all.deb d9eee9699bde87fb2156d20220df187f35442dbe 2126532 manila-doc_20.0.0-3+deb13u2_all.deb c15efe45c7290d105e4eadbebda48dd15687fd92 9600 manila-scheduler_20.0.0-3+deb13u2_all.deb 7d0705b0c444a9a907bfb33d71115ad2ef3b1e83 9584 manila-share_20.0.0-3+deb13u2_all.deb 87da681f6137615f6c5e1ff0256bcc3d4b86b014 17446 manila_20.0.0-3+deb13u2_all-buildd.buildinfo f5b247f1c0c6d6998e06730eec01d6ca677105d0 1458084 python3-manila_20.0.0-3+deb13u2_all.deb Checksums-Sha256: 4fcbcc442c93523e2488f2a5e3dda1b0a7b9565e40d7d83f5c6af461f2ee931e 28404 manila-api_20.0.0-3+deb13u2_all.deb 01c19e73a0f3af531c45dc5b348eaa687818e5517af0a96f87137d869997b8f0 68380 manila-common_20.0.0-3+deb13u2_all.deb 8ef21900ef7c0ec6a228ffcb5663490f426da9b16e54353ca22d7dc4528fea6c 9468 manila-data_20.0.0-3+deb13u2_all.deb 591e4b992fe66b7f5fcae0f4ae535240916044c2001b21e2b48cfc65fe62cb0b 2126532 manila-doc_20.0.0-3+deb13u2_all.deb 65b98cbcdd405e789f07a83c0c5aaf3efedc32ba3abeaa810389202e7e2dea30 9600 manila-scheduler_20.0.0-3+deb13u2_all.deb e2fd3c569cb925478bea2bc1ce6350fa56e3cffafd57b9862f57a7060ee3993a 9584 manila-share_20.0.0-3+deb13u2_all.deb daf1d845b45c2985f2999e250464b5ea6dda2f5a23c3f91c5ba41a961033a508 17446 manila_20.0.0-3+deb13u2_all-buildd.buildinfo e1b270011e2e139791d137115b0898143f72c77c21f719d77537715f68b6b95b 1458084 python3-manila_20.0.0-3+deb13u2_all.deb Files: b01f916905a086b59a684eecbaac7121 28404 net optional manila-api_20.0.0-3+deb13u2_all.deb 96f02f70f9e26f0c412ac8cb781f6d82 68380 net optional manila-common_20.0.0-3+deb13u2_all.deb 4090eac2365e35be351ac14afdde997d 9468 net optional manila-data_20.0.0-3+deb13u2_all.deb 9ebf903fbf6d3f0758014f242c738ab8 2126532 doc optional manila-doc_20.0.0-3+deb13u2_all.deb eebeb152cb76d4a29f44d2e23d57d792 9600 net optional manila-scheduler_20.0.0-3+deb13u2_all.deb db760769d00310c2d86a5fff3d37889c 9584 net optional manila-share_20.0.0-3+deb13u2_all.deb d6c26a0247ad1b316ea6b64e460f7f3e 17446 net optional manila_20.0.0-3+deb13u2_all-buildd.buildinfo 352dc8cd5d0a12e056b8511a4a965de1 1458084 python optional python3-manila_20.0.0-3+deb13u2_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmr4SnkACgkQmgPNRvTf /zcN1BAAwXr8C6fYPCQhr3btgiNz7OGc6Ccwwsycazuwc54WTPjJrSzhcFi5XYqP 51xAXuaIj1RVUsJvlt52+9g0ImnUH/NblaovaVTzGUzskseBGkB629uxEH93cO/c 494Y7Omi5zlwUOSD93yUA3YkYeoAx9LpZB8313ol+HfaSDivDkOURqNHADHEwv6U KOYapUP5IdKuuwfDedCrBYahNOLXKoCLMKnVaqctMwKiztUYkpPRgsiOruvHARpx 5+fslD6w+M2yaxBo2p/lVQN3J6D8+FygKgjybRG1v4UDhGw8MtOksTiJU6pX6BkY 4YB/azT8DXVAKpmyC7Cp8+xwHyKR7e6FF+Z+/I/WO20n1hBZxatKE3JHDbwfBUHl F2Ax39qAIpq6CWyjGDVX5za7htb2h3JcLPIRn3EZq2iSMEGNLXYQ60uDlbNZyBvz JOeBOefL5+rYJVhIroCxv+l10Fe/4r0NkqWHsfq06Vp6IdOZIddGoOYMRqO/V8yO m2XMuhhXMR6WSvVXpb2AMofzm5xWJMt21RQdLvGgMgeolkXSEaQzK26o0KJk4Nqx EPcoBA8weD75TxT2ZYstJLcx8BZa8vk84Q9r9BqBN+aARsqUfCMYUM9QkhRoqw/2 nP0AKR3tE7PKySMIXxbumIRnTrUMyLAkBso7blcH0sh3QdxSfp4= =DO+q -----END PGP SIGNATURE-----