Accepted glance 2:25.1.0-2+deb12u5 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 31 Aug 2026 11:00:14 +0200
Source: glance
Architecture: source
Version: 2:25.1.0-2+deb12u5
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1146594
Changes:
 glance (2:25.1.0-2+deb12u5) bookworm-security; urgency=medium
 .
   * CVE-2026-71196, CVE-2026-71197, CVE-2026-71198: Multiple SSRF
     vulnerabilities. Applied upstream patches:
     - CVE-2026-71196-71197-71198_1_Properly_limit_web-download_image_f....patch
     - CVE-2026-71196-71197-71198_2_Block_restricted_addresses_in_web-d....patch
     - CVE-2026-71196-71197-71198_3_Pin_import_downloads_to_validated_d....patch
     - CVE-2026-71196-71197-71198_4_Block_restricted_hosts_when_adding_....patch
     - CVE-2026-71196-71197-71198_5_fix-unit-tests.patch
     (Closes: #1146594)
Checksums-Sha1:
 44c00f5c5b3cbde41f0b728fdd8b06612bdb07e4 3829 glance_25.1.0-2+deb12u5.dsc
 26e73a82389323bec8bc203b298c23ae46c6dc12 1504620 glance_25.1.0.orig.tar.xz
 d2a3522d2b61b5eb44d1a4af82ebae5c6ce802b4 56868 glance_25.1.0-2+deb12u5.debian.tar.xz
 fe5e7094e1299e82ab5deb834f1f70e5f7223763 19594 glance_25.1.0-2+deb12u5_amd64.buildinfo
Checksums-Sha256:
 5a72bf626870591c64ab34f7077df4f9150209683dd0ddf5e4f0059dcef0a4a6 3829 glance_25.1.0-2+deb12u5.dsc
 d90dc2acf25282337cf0394abd025bb6a35aa339beb920817eab70465ff3e119 1504620 glance_25.1.0.orig.tar.xz
 7bce2769a092fc43ee88c00043df842bf10b1f65e12e06676cba15eb05317f19 56868 glance_25.1.0-2+deb12u5.debian.tar.xz
 2441f4c759591cec34fc71d0d846085f40965642ab899ff182383cf83506f9d1 19594 glance_25.1.0-2+deb12u5_amd64.buildinfo
Files:
 4c7987c11948081a4516f4f2d6187077 3829 net optional glance_25.1.0-2+deb12u5.dsc
 6dbe10c1a179ad92f1b97cf0375ace95 1504620 net optional glance_25.1.0.orig.tar.xz
 6f496ebb8c9d906834d745f8194172c9 56868 net optional glance_25.1.0-2+deb12u5.debian.tar.xz
 952da573612ad005b2f59811f0ee6dba 19594 net optional glance_25.1.0-2+deb12u5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=H0J/
-----END PGP SIGNATURE-----