-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 May 2026 10:01:20 +0200 Source: ironic Architecture: source Version: 1:35.0.1-1 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1135898 Changes: ironic (1:35.0.1-1) unstable; urgency=high . * New upstream release. Include fix for CVE-2026-42997 / OSSA-2026-010: Credential Forwarding to Arbitrary Endpoints via Ironic’s idrac Configuration molds Feature (Closes: #1135898). * Removed patch applied upstream: - CVE-2026-42510_Shell-quote_console_command_passed_to_socat.patch Checksums-Sha1: 38e95bf4561503d09d1d94f52958eca12ad21650 4063 ironic_35.0.1-1.dsc 085f47208b8f6e53b384b2fdc821af19a34113d4 2145772 ironic_35.0.1.orig.tar.xz a9d2d811f93a7848bd9aa6319e87704a9c19ae59 18880 ironic_35.0.1-1.debian.tar.xz b83637454ffc93d919bf3e8c721c84ebd22edbcd 22745 ironic_35.0.1-1_amd64.buildinfo Checksums-Sha256: 27a6ca152055567981c39bbb8cef93a3c1df5933dabce4e1b588b1cba274f238 4063 ironic_35.0.1-1.dsc fbb91f1171db0a336d74ddf011efa76980b857c4f4cf91a9e83a15f4d396e76c 2145772 ironic_35.0.1.orig.tar.xz 237d3683994fbeaaaec1272750b481bf4999e0c7a96ea9ba5c68169846778eb8 18880 ironic_35.0.1-1.debian.tar.xz cbf808c68696df816038f0bc01848a73743ae389be962c51cec1d78f742433ee 22745 ironic_35.0.1-1_amd64.buildinfo Files: 9ca34c37c61890f8e24ae9d439ce2eeb 4063 net optional ironic_35.0.1-1.dsc 75fd681e991e3ee07dccd53dfc01246d 2145772 net optional ironic_35.0.1.orig.tar.xz 6ec43f2148dd440c118fcb75c422b2f6 18880 net optional ironic_35.0.1-1.debian.tar.xz 42a4058b2beae028f03ad332d267ccc9 22745 net optional ironic_35.0.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmn8UZMACgkQ1BatFaxr Q/7yFA/+NqIlGFqKbTzLlFqfcbWQCnPsaxl94lXVRw1Zr1UsnZR7TQMpuyfIKynz Cfie0PYXinD8xpw37HCNnhiXagqvGFHD3h3BOVis70HKwrk+8ihYgQJFOzkYo7Ju A9LIWRmo953zptlycD6R8OBdAOzNkQTzeNZfh2pFSAbyYJ4HhCay9F5N3fzxnJMj SoOLNJa325JGldR0N1trfQ7RZpjgc9ezFFmL/qZYyJxj6J3qw11/5Z6XlkyWVwmH HJCR0gf7t5YgRFPHOXWiQ6CUw3phe8AYPR0IpleawGM50FHCgQyb2jQRInkBtzgE Ar+WqhNeW/JBaQG4XT6nlNGsFl0otzh7lnP4JHjJ/1Lgn8ZHFg4DYbJV5lZyoedq 5sSxB14+Aeq731REx8zhY/ydMvK9kM967kTb6ZGkZWTPyT6P+S3PXCIkI2CcYNXc 6AgMS59PlFZVdIyl2b4M0wY7G5jouu+1yfuYYuIjqWKkmo+0IJcDn8G73L/Li+v3 TujlppwGhLJzs+vB1mmxLPbdmOx802XKwhhv0A5e1/T3eD+YApxBfpCrb2K1bkcn FgZhXnYfM0CIYmquu+59E9Sg+995HFIkAgNit6Oa0a/VRIORFP1kdtYm9ieIig74 K+hZ4uEN8jA41QAIBu1FJqemeGUI+jeoL0kUgb4XiO9TGCGxihU= =F6hN -----END PGP SIGNATURE-----