-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 15 Jun 2026 09:16:13 +0200
Source: nova
Architecture: source
Version: 2:31.0.0-6+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1140149 1142113
Changes:
 nova (2:31.0.0-6+deb13u3) trixie; urgency=medium
 .
   * CVE-2026-46448 / OSSN-2026-022: Nova scheduler hint injection bypasses
     Placement resource claims and scheduling constraints. Applied upstream
     patch: "Strip internal _nova-prefixed scheduler hints on create"
     (Closes: #1140149).
   * OSSN-0101: Nova console WebSocket proxy Origin allow-list poisoning.
     Applied upstream patch: "Fix mutating global config in websocket proxy"
     (Closes: #1142113).
Checksums-Sha1:
 b47512ab08f6e010c5b485c18ee1e4d75d8acca0 4854 nova_31.0.0-6+deb13u3.dsc
 9bfd90e7c79db45773b7ef1a24814974c9a0aa62 6124328 nova_31.0.0.orig.tar.xz
 744ed20fa65dea737b9b5401983f9ab816f38f05 75008 nova_31.0.0-6+deb13u3.debian.tar.xz
 aa1e9d548efc97e0a495ed145c4bbd8edd689b70 26713 nova_31.0.0-6+deb13u3_amd64.buildinfo
Checksums-Sha256:
 83d30fb3bdcd6db50c2ecddf4c1c24c7f51f53f860724eb5389a0ea6efdfff43 4854 nova_31.0.0-6+deb13u3.dsc
 51662e6eafcb3a278f6629683494094f587188fda4e8812ab23709a30dc579bc 6124328 nova_31.0.0.orig.tar.xz
 6b2b926923a453756324c561ea0542aed5124e850831b0fd0613169b37ecbd53 75008 nova_31.0.0-6+deb13u3.debian.tar.xz
 b8789c5ababc381378d2cd2f46cc7d60e0cfe3e1a1330e84a66ef557f905298b 26713 nova_31.0.0-6+deb13u3_amd64.buildinfo
Files:
 51bf8883f324076bb80f2eae46ca8afb 4854 net optional nova_31.0.0-6+deb13u3.dsc
 3d75440c9b58a64b74b46a13a74c55ce 6124328 net optional nova_31.0.0.orig.tar.xz
 4fa0942fd544d1115ef64046539d80bf 75008 net optional nova_31.0.0-6+deb13u3.debian.tar.xz
 d00a232f03ad2e58dbe23075531eea80 26713 net optional nova_31.0.0-6+deb13u3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmq1OIYACgkQ1BatFaxr
Q/7rTg/8C2NjqtaXI5z1lHUBISPcpguHl8yPH66Nxd3oNAlhE7EtQ5mvkFhFlAxi
9weKg/8skNLZNdkUabDJPtXwcvzQ7NsHmLybyatg7iyRO97BYQ10sieK5C8He8Kj
XGWFI01OR88kvwLrQfY89iBXArqgfE8r4HiBUhwxVfrJ/4lXzTocb4ypYDE/YdyN
+ab40lMenfqCgbY8HDY3Mjknd4TCzrUD9ih9JX8x8bPvf0M3s3XyLPI0V3qx9W/Q
sGcxp8lW3diaY9mRzmgteqiRI0cOT3/z+UaLki+ejZNfZ/jdVHwnLbUWR8cto/M3
9L0/M2hbjNs9tYseiELiVv9uid9SJmtbOjls4Q8adqMuK/ui3e7ozCyqQShnF3Px
NWZfqeGOvmBzp1Z2ONmdw2cIiHzhyGL44W3TpfHVlghxwPsj09E8JzO78l093OlB
DtGdr8R5L6YpDStYYlRROJSBMDgGxPImkQwx6NG9YRCycjyXcsSgNIfIlfnmiETe
rlsoHgJsuxsTKPkbnLOHjE7PNCKNRGNMpJkkk75AsVn5eMnbdWcXtVhO66Jdy4lS
OYdm+aq+NeQmj1SLvwuddPBJD+LPKiloX2Pv1710Pa8O1rkWQ3WBgr1RYhoGANXz
q8/8LnmwFtwyM3IxZ25DaBzC+SFNI8QmdBv/7UML1kRJPZC6qMA=
=2JCY
-----END PGP SIGNATURE-----