-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Jun 2026 21:57:05 +0200 Source: python-oslo.messaging Architecture: source Version: 17.3.0-4 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1138848 Changes: python-oslo.messaging (17.3.0-4) unstable; urgency=medium . * CVE-2026-44393 / OSSN-0096: oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake. Added upstream patch: Fix RabbitMQ TLS hostname verification (Closes: #1138848). Checksums-Sha1: a089e5ca26dcaff6efeb02c812bc2d61eab5553b 2872 python-oslo.messaging_17.3.0-4.dsc e83298b292c446b82375c21f1723c6cd212eea15 11692 python-oslo.messaging_17.3.0-4.debian.tar.xz dd3d286a186cb8bc5961877124276282bfa7a7c4 12875 python-oslo.messaging_17.3.0-4_amd64.buildinfo Checksums-Sha256: 29ec65a7e8b79aa2becc0eb32689a6bdf27f71bcc3a5e6abcf7d60c245c5b21d 2872 python-oslo.messaging_17.3.0-4.dsc 35faece4e934ec90a3c284ae20215012cba54eb697a8870ff3d625f1e4a32ba2 11692 python-oslo.messaging_17.3.0-4.debian.tar.xz b2c97c1b27462ebd9ee8f4cf7e3ec4b29a0403c09dcd8a7b199c098b76e8d27e 12875 python-oslo.messaging_17.3.0-4_amd64.buildinfo Files: 0b5f611017e3fb4a1d1b6539cbb28548 2872 python optional python-oslo.messaging_17.3.0-4.dsc f2416a66aa8ed2a4f975ae8ab8fef98b 11692 python optional python-oslo.messaging_17.3.0-4.debian.tar.xz 18b11ccb1adb859764e79974d0a5db4c 12875 python optional python-oslo.messaging_17.3.0-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmotXG0ACgkQ1BatFaxr Q/7Itw//TOputJvcZnYLgHDF1+jo1+s0aQrRZny+zzr7Y79Z53kH2ZwKUxUPFZWp toRiia5k7copdBdHh9OPTlCN3hFc9syVkqvd5JPI7sFKXxSLf0OPP5iSMJdX/tGo JRNSCgYRiDN46KP1HX/1kfDUbdDbf/6GfxJ87RAIiqi/+O+jUBntlWoyZUGhQV3q UH+gkxVvFvsJtc5DrVsKq2OzhSTKtCNkF5eEXx1yjmilpYDNFj0dYni0/QMbEuL/ TWPqBnL5Bnz3kxYELLFY/6ppKkBH//klZ2nRcIweehtpjnmG0/YGxyTFBNzBxKIL QCmrEOaLzP/nuaD9x8r2ULe3PJ2mT/K+OuUDpl46MBAt8hFK2xuV8EFt6YhScB92 IhEswke81ym1Yw18GLzTE0VyqQ93sdSFDa7v5fnzGoc0IQP4jovO+1jbBzRiHq9b lLfMYOex1tLUnRdBLBP97Z2Spj+83czWyXs+ZnUPPkdRiWN0R+e/ckWkO/+mM1gI H3zZ40ajbepaPimNfzHmox14G7wyP0b76V0vhac1U05ZVNZpLeFYxGK6iUi8fYj5 gFTF3s3CyEjsabV4E24DuwiS8q1gUM+MzwgsJ6OyB5yuXh0RJQvd75TvxCj7RoW+ 5INmjb/WuySJT3m7/wguxX8y/Y9pbcYXnb/CuQAeslv3HMEt47U= =Qcd9 -----END PGP SIGNATURE-----