-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 11:17:37 +0200 Source: neutron Architecture: source Version: 2:21.0.0-7+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1142937 1143170 Changes: neutron (2:21.0.0-7+deb12u1) bookworm-security; urgency=medium . * CVE-2026-55707: subnetpool onboarding cross-project subnet mutation. Applied upstream fix: CVE-2026-55707-stable-2025.1.patch. (Closes: #1143170). * OSSN-0102: sub-resource APIs do not verify parent ownership. Applied upstream patches (Closes: #1142937): - "Fix PF GET/PUT parent floating IP validation". - "Fix cross-project access to router conntrack helpers" Checksums-Sha1: 7a0c9258cf0beaf6b738c4867c0e395f970d3f51 4960 neutron_21.0.0-7+deb12u1.dsc 0058073661f8460b19aceb8300132fb2d99d21f5 11927564 neutron_21.0.0.orig.tar.xz 55ca2fce0fc83c8727bc46822fb9f97fe9678a64 44908 neutron_21.0.0-7+deb12u1.debian.tar.xz 5f6449698618514c677aaa5ba198c256ecde98f0 22089 neutron_21.0.0-7+deb12u1_amd64.buildinfo Checksums-Sha256: c43adaa406f1ccf521ecced7871d97cdd1c1aa07708d89df4199e40b821802c2 4960 neutron_21.0.0-7+deb12u1.dsc b802e4dad9d8d49bc6c61f9589f548732b35637c52633bb99826ae12dab10c8d 11927564 neutron_21.0.0.orig.tar.xz 03cac6dcb76be2d16000f71504e3f6af06e9a9112fa0f9861b671183928e2033 44908 neutron_21.0.0-7+deb12u1.debian.tar.xz a1e019649fcb33247d3746f371c4afa95c7a9e022da43496e03c7063172feac4 22089 neutron_21.0.0-7+deb12u1_amd64.buildinfo Files: bb87fb0456561dcdd9c8cd254dfca415 4960 net optional neutron_21.0.0-7+deb12u1.dsc afb72738a05c5418b035fe4530275742 11927564 net optional neutron_21.0.0.orig.tar.xz 160912c84fc43637841c0e12da71fce7 44908 net optional neutron_21.0.0-7+deb12u1.debian.tar.xz 5ecfdf4d7b0e0b0b974f9eb7c0468c4a 22089 net optional neutron_21.0.0-7+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmp7C8cACgkQ1BatFaxr Q/6k7w//aTfmzOWXngP34GRQWK3j2qLODQAVAQZLWDiJvlLLwO/9+fY+rbZ1UJkB ZoQ3dCP7iVUUOewt20bUVgSy5d2MgO4ikTX/Xm0ZfmYChLsbxGp74jSe+lEZ8SwT PSCCywlhr0cFUlAiKk6/FHDxtllKjW0JC9YWGij5XYEfFI1bSPLfhbYzU6KdT6XV IQclM4nJeJ/JEQza6FmnBpKxiyaohYK89O4O8n7t/mjdWxfCih4e45YpmQNq4hy8 0HTw4407uaNr9iUecGIoJ/2BSffj2HQoaX8xAx5cDVDbRxGVrNod24DyS8Xy6+lN vAMc82U08R1HNyUO1lWzr8sEBF8LPlPSYsQDGRaDpMsgbTWCx4Vn5VRrJo7zowG7 m88w9DsT/PICucacTd7qBITVL+5Tj1k2a+UksxNJSGvcuJlj0J8FCJJTCDFOFFMI 10DmXbTOhIjCoT6AQnA7VC1Ir7fE53MwFZ2jP9txuu5k4eCAKn4iRIik+USqSXRy ueFLjOe3rA1OqqyaN1IkVtaHPMgCa0ApzsDzuRPMyZi+sFgOahlzG5pvYWRZ/9oI eCwvlZGzKX3Vuc3veWLiZ9I9/0X5QkBtbcX7s8hC13L7BSC0GRDWMK8f8ZvDY35w us21duj8NezMKKUMF2IOo0a2S8MDcVkzSAVDSwCM78twfTvDVrA= =HqR9 -----END PGP SIGNATURE-----