-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 28 Aug 2026 10:50:37 +0200 Source: glance Architecture: source Version: 2:32.0.0-4 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1146594 Changes: glance (2:32.0.0-4) unstable; urgency=high . * CVE-2026-71196, CVE-2026-71197, CVE-2026-71198: Multiple SSRF vulnerabilities. Applied upstream patches: - CVE-2026-71196-71197-71198_1_Properly_limit_web-download_image_f....patch - CVE-2026-71196-71197-71198_2_Block_restricted_addresses_in_web-d....patch - CVE-2026-71196-71197-71198_3_Pin_import_downloads_to_validated_d....patch - CVE-2026-71196-71197-71198_4_Block_restricted_hosts_when_adding_....patch (Closes: #1146594) Checksums-Sha1: b3184118dac8b7c3b2f7b026f468af8c6d25b04b 3707 glance_32.0.0-4.dsc 520c622c2668c8afdceb445e682b61649aa076f1 39292 glance_32.0.0-4.debian.tar.xz 9a9ceeead2fbe5e5ab441cff5e0b5bb4ef1268d2 18727 glance_32.0.0-4_amd64.buildinfo Checksums-Sha256: 0172026b91a6927487deb323ff94ea0f631a7a9c86b7255a381beb3b52e47f13 3707 glance_32.0.0-4.dsc 865d7eebb128b8f0697a618f2c7ffa5d24636fc16448d57b5867494dcdee52a2 39292 glance_32.0.0-4.debian.tar.xz 7c30f0786068aa2a791d9bbed0bbfbc75b234332578433ee46b9ff31c678cc5f 18727 glance_32.0.0-4_amd64.buildinfo Files: 6f0580204d0dd790c57d636f5f498067 3707 net optional glance_32.0.0-4.dsc 8d9be09dc2bbd590d1597103a6dcc419 39292 net optional glance_32.0.0-4.debian.tar.xz 6d225b0fdbb41267de4ac5c690b3bf60 18727 net optional glance_32.0.0-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmqZ0AEACgkQ1BatFaxr Q/4HVA//TKQV3lQuJSb9lq5Wf+ODT9Qyv7+b90v007gfHzHQGBrep9G+yMRcEZEG 8Qud5c7Kxt2vvOiqPiX+so4btAEEj5thyAO9PD672uCnrBB8tZZaRXaZ8SIv6r0+ T6x/hScvCUPmvoMm0T9YnGryFyBcDcWXGQg47tkKdMw+DapGZtks20CMeo3IUBbw heLdW3o1WEceMWvsK7fsRDMdGXvQmN2oq14gc1Q/DuPWUq02qSB+kD+q1nQQ4riF 4CSAzd36ubCdj9ttefb/tXd9xLAsfBtO42t7x69Bnq/aHUM46nRZiwQVOCF9jrT7 kR/NIE6TbnzF575d5nDmk0qfJihRlAikbDwEK+TPgKFjrWTogFCHEV4ntH3JRfIG fv2VYf+tPNdmN4vIorZwt0vXmzMeutqy/hlTS6SUje1/n2tQszn7UqnLFFt6YyAR IEmJeloSjJA/g+4uC7LHDaYk/KRIUNJNd3BQbng4QlYvQBKfqZH505e+ZzucZE+p TqrKoJHH0HjlKYLLhpcwhOITB66MfzMhVOTWFHQRL3b6e3cX/qyA+YpMlxD7cOh1 xPSTsKRS2vzTDBvtmlGCbNuL9Hyo4D6X63mLUXMUXBdpIQecMdMhKsv/xJJH3MZU 8i3VJoZzeTo4tQFzbEn8z9rFB8LYVd5jjcNdfjNHPTLlDfffdXk= =5QT2 -----END PGP SIGNATURE-----