-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jun 2026 09:59:57 +0200 Source: nova Architecture: source Version: 2:33.0.1-4 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1140149 Changes: nova (2:33.0.1-4) unstable; urgency=medium . * CVE-2026-46448 / OSSN-2026-022: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints. Applied upstream patch: "Strip internal _nova-prefixed scheduler hints on create" (Closes: #1140149). Checksums-Sha1: c35c0254ea3cb009c44ab1bddfe321cdda36b4a9 4706 nova_33.0.1-4.dsc 2efa653d46dec20d9281d10ccac67293e9ecd314 71404 nova_33.0.1-4.debian.tar.xz 7f9b28da234f0b4d19df07309cb73cc8f4bb89e5 25786 nova_33.0.1-4_amd64.buildinfo Checksums-Sha256: 80deb41fa6e53e42ee113f5a417c7056272a6bef157e2eaaff5714aa145262b6 4706 nova_33.0.1-4.dsc 60fd64df9d413843614ab55a57d972d37918dd06354c558fd473950b17febf53 71404 nova_33.0.1-4.debian.tar.xz 2639480c3dda4ac488e9107de054133dddc90b0f8e549b4ffd82d5447d2e0969 25786 nova_33.0.1-4_amd64.buildinfo Files: 2290f36b50b8f3dc7966fd4a98e4d7a0 4706 net optional nova_33.0.1-4.dsc 2b1eca62b28eadc749c553adb0e16f86 71404 net optional nova_33.0.1-4.debian.tar.xz 6d1c5a8b3c25364ec933a4a5d208c8d9 25786 net optional nova_33.0.1-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmo47DMACgkQ1BatFaxr Q/66jA/+OlPz+f6g+lj3+42mNlcZoGbspYyZL4J0rMk7Jor3Blq4yLBx+URaAS1j HCarxkZdrmRl3hF8Me839UVv+RDtobS7lf6dRFubDLMnBNrheHjhlDEdDaP2ZkMC crm8plBmwDRrqdwHGgyojdSEPCvNq8GXrroW81vj5TUDl70Up/YG9cWgT5J3f1UP r3lExG2CHuRbdMoAAclz0t/pXddMFdX/ptpy3pwvrfcsddJD8ugbvS/ZtcXeFIU7 cfIEKxWmU91PK1dCCmhLMQ+0XFOMsb5Wu2SnvzIDyGIh8gFqrPahnM2yPniD7Mmn ezVXOLadph2unA+5ACqAlzj75iyz9P994BmdD5LPtbFbFsR6N4RB5Pa/0ym6yS8Z R6EBXPeFMTEriUBpGmdoVmqDDhQdgrSrpodZj+ZRTMCwCwQYhQ6ynAi/NMFY3OKy aDMWzaMFSzxVnFCVF2eylAOanKN7e2nPmky8k+1sqX+mYV6l+/Op6BG67znXn1SG Ijv2j5zZyWk74oepjGj7sRHFAJquRGW8T2nMtBNn9trD9HPkyBbf8yByyw7awKAl fMGVjaMVcUnz6oynz5qU69Re9qJzi1i54ksve4pEpkIff89rOb5mQrHafXNeWZcw CXOGARM7ES3yQGtH1ZHM+x3TEVGj7ap7Lx7UCBE9ChlSsSl/Z9M= =tVuN -----END PGP SIGNATURE-----