-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 13 Oct 2026 12:06:42 +0200
Source: octavia
Binary: octavia-agent octavia-api octavia-common octavia-doc octavia-driver-agent octavia-health-manager octavia-housekeeping octavia-worker python3-octavia
Architecture: all
Version: 16.0.0-2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
 octavia-agent - OpenStack Load Balancer as a Service - Agent
 octavia-api - OpenStack Load Balancer as a Service - API frontend
 octavia-common - OpenStack Load Balancer as a Service - Common files
 octavia-doc - OpenStack Load Balancer Service - documentation
 octavia-driver-agent - OpenStack Load Balancer as a Service - Driver Agent
 octavia-health-manager - OpenStack Load Balancer Service - Health manager
 octavia-housekeeping - OpenStack Load Balancer Service - Housekeeping manager
 octavia-worker - OpenStack Load Balancer Service - Worker
 python3-octavia - OpenStack Load Balancer as a Service - Python libraries
Closes: 1144814 1148175
Changes:
 octavia (16.0.0-2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-74248 / OSSA-2026-035: Unauthorized QoS policy deletion lock.
     Applied upstream patch: "Fix QoS policy validation to use request context".
     (Closes: #1144814).
   * CVE-2026-94572, CVE-2026-94571:
     Octavia is vulnerable to an RCE in its amphora via the Octavia API.
     Added upstream patches (Closes: #1148175):
     - Fix_HAProxy_config_injection_via_tls_ciphers_field.patch
     - Fix_HAProxy_config_injection_via_L7_policy_redirect_URLs.patch
Checksums-Sha1:
 964efa00666c4a9424f6d7e627495cb51902690a 13776 octavia-agent_16.0.0-2+deb13u1_all.deb
 cf72d490fbe6bb4b184937beef50b120c791d8b5 24696 octavia-api_16.0.0-2+deb13u1_all.deb
 48bbb4503df0eb33ddcd21a2db7f271142a6e4e8 55888 octavia-common_16.0.0-2+deb13u1_all.deb
 a22557f004d2837a53ff279835cc7215ebed3a67 2152144 octavia-doc_16.0.0-2+deb13u1_all.deb
 c64699f8c1a6e2e77126e489987bcd9fb3136bfa 10188 octavia-driver-agent_16.0.0-2+deb13u1_all.deb
 ccc7a4b64ce28911a69a2bf76c0271807d3be336 22456 octavia-health-manager_16.0.0-2+deb13u1_all.deb
 0855c4fb7b159d6c35dbedd8633be0c8e5b87626 10168 octavia-housekeeping_16.0.0-2+deb13u1_all.deb
 21607d373ec678953468834db8db926e311524e4 10124 octavia-worker_16.0.0-2+deb13u1_all.deb
 74ef3b1c4925a9f337f957246f08ea142bb89c2d 22134 octavia_16.0.0-2+deb13u1_all-buildd.buildinfo
 fd6262f9ddfb65bbc7cc9e2fbff027124b7a9c74 584528 python3-octavia_16.0.0-2+deb13u1_all.deb
Checksums-Sha256:
 f6e9bb98efe8b27906138e07f4c9209b30b9e40877ff8580ba60f1a2a4e53f8c 13776 octavia-agent_16.0.0-2+deb13u1_all.deb
 598848487bef82144dd36b683f490dea76306c90d3e437438db806ebc615d0ae 24696 octavia-api_16.0.0-2+deb13u1_all.deb
 85e8b4634be7751cadf5ba7188a6d984bf351bb8042d5743bd1b567816824b27 55888 octavia-common_16.0.0-2+deb13u1_all.deb
 3bc00e4fdc53a2e47e31ed25626d5c342b81905dfe93a52a40bec7db0be01cea 2152144 octavia-doc_16.0.0-2+deb13u1_all.deb
 c7c95843f458ffffd94a8ec7263e741930aab1e529ec3b49e16d72a1be3ef660 10188 octavia-driver-agent_16.0.0-2+deb13u1_all.deb
 4dcc9c7e979d5691d7869277c4498a178e97379d4d90adb8fef3b3bbb0135884 22456 octavia-health-manager_16.0.0-2+deb13u1_all.deb
 7bcda3ad0b332996464b14c35a9c837eb650c40fd9aae9a751a04f76538283a6 10168 octavia-housekeeping_16.0.0-2+deb13u1_all.deb
 d45701f99ad23cce0d66ce7ffacb574d3b3729ecb6dade6d3167a80b36845440 10124 octavia-worker_16.0.0-2+deb13u1_all.deb
 f8f44c0895835bb021434f9db1b81c807baadd42f948611c8e5f54b86b4407c3 22134 octavia_16.0.0-2+deb13u1_all-buildd.buildinfo
 c146f8dd03144a6df78401c66180913b11da36e1d99623ff5d460f275c822207 584528 python3-octavia_16.0.0-2+deb13u1_all.deb
Files:
 1645c0f54f8a43c8f78f0c46de37ad2a 13776 net optional octavia-agent_16.0.0-2+deb13u1_all.deb
 8566ca1c0d7ff70dac5298d320acfcfe 24696 net optional octavia-api_16.0.0-2+deb13u1_all.deb
 bc585aed187bab40c0467f1fa3d5a804 55888 net optional octavia-common_16.0.0-2+deb13u1_all.deb
 b543364e99049f8007e7e0985b67e125 2152144 doc optional octavia-doc_16.0.0-2+deb13u1_all.deb
 24375f485b26cda07760996877bda1ba 10188 net optional octavia-driver-agent_16.0.0-2+deb13u1_all.deb
 90ad5d8b437e4cf7b8994102e4a75aa4 22456 net optional octavia-health-manager_16.0.0-2+deb13u1_all.deb
 5391dd02dbc12d3ab2f18e6f5d1ced27 10168 net optional octavia-housekeeping_16.0.0-2+deb13u1_all.deb
 c809906dc4b4a5025933885fe1d077b0 10124 net optional octavia-worker_16.0.0-2+deb13u1_all.deb
 ce9d4722188414298add2b50fb3b1e22 22134 net optional octavia_16.0.0-2+deb13u1_all-buildd.buildinfo
 0fa81b2b1e5c8abbf86e94e6204f75f0 584528 python optional python3-octavia_16.0.0-2+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=oO1J
-----END PGP SIGNATURE-----