-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Jun 2026 09:16:13 +0200 Source: nova Binary: nova-api nova-common nova-compute nova-compute-ironic nova-compute-kvm nova-compute-lxc nova-compute-qemu nova-conductor nova-consoleproxy nova-doc nova-scheduler python3-nova Architecture: all Version: 2:31.0.0-6+deb13u3 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Thomas Goirand Description: nova-api - OpenStack Compute - compute API frontend nova-common - OpenStack Compute - common files nova-compute - OpenStack Compute - compute node nova-compute-ironic - OpenStack Compute - compute node (Ironic) nova-compute-kvm - OpenStack Compute - compute node (KVM) nova-compute-lxc - OpenStack Compute - compute node (LXC) nova-compute-qemu - OpenStack Compute - compute node (QEmu) nova-conductor - OpenStack Compute - conductor service nova-consoleproxy - OpenStack Compute - NoVNC proxy nova-doc - OpenStack Compute - documentation nova-scheduler - OpenStack Compute - virtual machine scheduler python3-nova - OpenStack Compute - libraries Closes: 1140149 1142113 Changes: nova (2:31.0.0-6+deb13u3) trixie; urgency=medium . * CVE-2026-46448 / OSSN-2026-022: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints. Applied upstream patch: "Strip internal _nova-prefixed scheduler hints on create" (Closes: #1140149). * OSSN-0101: Nova console WebSocket proxy Origin allow-list poisoning. Applied upstream patch: "Fix mutating global config in websocket proxy" (Closes: #1142113). Checksums-Sha1: b3c1a0c8dd5aac408afdec0ae67cd7f8cad1b4ff 32840 nova-api_31.0.0-6+deb13u3_all.deb 94a1c42bc405fd29078e1b237f6c528bdac86609 138968 nova-common_31.0.0-6+deb13u3_all.deb 0ad9d5a67f6c075407b7d037c55d7feb46e9c7b5 10992 nova-compute-ironic_31.0.0-6+deb13u3_all.deb f62e364ac5d49c0b58c92afd0ff990e0cf76ecae 11216 nova-compute-kvm_31.0.0-6+deb13u3_all.deb a837da5399a965927252b19386b185eca191aba6 11060 nova-compute-lxc_31.0.0-6+deb13u3_all.deb a3ff52551f209db8bcb34d15080116f85b550b42 11080 nova-compute-qemu_31.0.0-6+deb13u3_all.deb 69171138ae3677a4068834f4c38e5104997ae3d8 17608 nova-compute_31.0.0-6+deb13u3_all.deb c469a87597ce641d11e1fec49433111e8b51e04d 16936 nova-conductor_31.0.0-6+deb13u3_all.deb 30ae187ba4f6a5a30abd685b34fb17ceb40cef43 22208 nova-consoleproxy_31.0.0-6+deb13u3_all.deb 11c97d2c60544812e721cdc227542d5a3453340b 3214948 nova-doc_31.0.0-6+deb13u3_all.deb 32cb07b185952e9a9a11a36b1846ebb0388d20b3 16968 nova-scheduler_31.0.0-6+deb13u3_all.deb e9c756787d6571ae78c8bead71590fb07b34b7b6 26481 nova_31.0.0-6+deb13u3_all-buildd.buildinfo 5e0a720485f4ad160efbc6a95d7621b8a76a00de 3093184 python3-nova_31.0.0-6+deb13u3_all.deb Checksums-Sha256: 69a726e0e9da069d98770f4d908f4ec22dded7691c4684c3d15efd21f5e071c8 32840 nova-api_31.0.0-6+deb13u3_all.deb 88848b5e59e8e2cc33d8e74a4a947cfdfe3c565ec62f5c9a02d40a2cfa423a2e 138968 nova-common_31.0.0-6+deb13u3_all.deb 8caa953c05b611ddb3748acb2e81eff955073a6437b86731e6b05b067db2b513 10992 nova-compute-ironic_31.0.0-6+deb13u3_all.deb a23c44b7fe0d634c1295cdb103fab720282b4eba86e16fc9d25c4d342bfc2606 11216 nova-compute-kvm_31.0.0-6+deb13u3_all.deb 99b32616eeabe9586183105115c2d25325af756cf73741c8aacbb99b1a321a4a 11060 nova-compute-lxc_31.0.0-6+deb13u3_all.deb 4613d23e934acbe4e9fc38d62821a90f1a8661d56b2dab9688b5138e17925fc7 11080 nova-compute-qemu_31.0.0-6+deb13u3_all.deb bf7392fc73c9c4cad3437d601ecc99c162a3c3dd16f997b0465bb32b10874c61 17608 nova-compute_31.0.0-6+deb13u3_all.deb 7fd5584879e8e30a742db52de9ed47994cefa235bc48fda23ae2f27d836e0089 16936 nova-conductor_31.0.0-6+deb13u3_all.deb 15094e0d2365efc6270703dbaa370404e2b5e1bcdea2302cd5a5f7cab03a3e3b 22208 nova-consoleproxy_31.0.0-6+deb13u3_all.deb aaed635124e4609223d285d48bfb149540fd6f719830206c471f11d5e07a72fd 3214948 nova-doc_31.0.0-6+deb13u3_all.deb dd148d6ed7ef1289747b0e25103f15930139da80171a44151fe52b3bd0cd5ad2 16968 nova-scheduler_31.0.0-6+deb13u3_all.deb 7d09595a2635e2614bdae448ceb678a2e9b18d05c8bca373fe0a7f50eb05fa3f 26481 nova_31.0.0-6+deb13u3_all-buildd.buildinfo 4ef187e43b954b786c73b62a26d3ff0bc7bfb1643d9ef8c9575bcc082ed18a40 3093184 python3-nova_31.0.0-6+deb13u3_all.deb Files: 38ea1f9fd56ccdefec4aa7f9783ed472 32840 net optional nova-api_31.0.0-6+deb13u3_all.deb d40b43b994dc5ca11be69e66b9a68182 138968 net optional nova-common_31.0.0-6+deb13u3_all.deb 4dd0d863bc95b5d248ec6ac55ce86875 10992 net optional nova-compute-ironic_31.0.0-6+deb13u3_all.deb cf8d1387acae5de8d1c50782a5b074a4 11216 net optional nova-compute-kvm_31.0.0-6+deb13u3_all.deb a309cce5b89f84ed3154acd3694ee26b 11060 net optional nova-compute-lxc_31.0.0-6+deb13u3_all.deb 6b9fbb7b030495552a432556fd990f88 11080 net optional nova-compute-qemu_31.0.0-6+deb13u3_all.deb 1ff632189ed8e6901998fd8e7dfb7a57 17608 net optional nova-compute_31.0.0-6+deb13u3_all.deb 74fa82ae89471d6a8fd9e605d3b7352f 16936 net optional nova-conductor_31.0.0-6+deb13u3_all.deb 126248c565b8b67a5e8ba97c93d5ce3b 22208 net optional nova-consoleproxy_31.0.0-6+deb13u3_all.deb b6c21225cb28854ec77de77428bd0d3f 3214948 doc optional nova-doc_31.0.0-6+deb13u3_all.deb e9ba88abc41f29e92f201af0eac6d962 16968 net optional nova-scheduler_31.0.0-6+deb13u3_all.deb 06b686fb2b4139c9ccf39ad6c667797c 26481 net optional nova_31.0.0-6+deb13u3_all-buildd.buildinfo 6b4c79e85f7254e152bfdf849f65cb21 3093184 python optional python3-nova_31.0.0-6+deb13u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmrvRgYACgkQaBVi67oX tfnoyQ/7BZjv9D6egLwrfRIiENJYj6AzBI8mjYqnsVsnukHPXSPuKleFW6fuO6jZ +DkfC0lJLyDOvJ5CWgw91bsPkEBRTif+NwKXJg20amHZsGjDZ4Cyqe+E2YPLdNd4 THCulcH45xBGi3KETQPreEKyZPAAjBzWxPhxWQXhxQZ/2gXeDBPbqAiiwk1QDjjq 9I5FR9At91Q2iFB4P/+PKM4o7MbBPf8DK/Jnq0LHB3KSWRrWqRbF1+0e7bUIuzcd ieMAGh/DbVV1CwvlG/dakdfj2vTrXasziR+wnCGCFwUPXZZxWN4du+JDTK+15zqi YlNyc8WG2KHxUhMW+ELBD4QQwOfLiZBMg4waH795UM+Yrr+x5lTBOzta6pEJqRp4 0aO3nn0ZQ5DD+0hDGa9d+M7hDXLZKeqjr8t09swdRAqLbUD/ZbXM56to6SXxnOhu tpaTM4anbrrrrmygtqpk9IrW4A6WpNeDgYhYLBJrs+brc5Xt63+cT7lLVjjHQI/m 4tHGaSyRB7zAYwEpNLZo9s00+++AcJy+Zd4Q6Fp736J6ZjePG3sOhGDXZVctcotD Z5YUV6F92pAi1C9WALAoSgptYfvHLnm/LhkjJpABuZMqDgdhTAB4zdJR4WXTpnKG ijGxdSKEjYY11idsRrpcxqkwwjSfkR+/hD7Eeda+LRjFUBy2ZiY= =1UHq -----END PGP SIGNATURE-----