-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 22:36:10 +0200 Source: manila Architecture: source Version: 1:23.0.0-4 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1151439 Changes: manila (1:23.0.0-4) unstable; urgency=high . * CVE-2026-71195 / OSSA-2026-046: Manila allows cross-project public-share and export-metadata changes. Applied upstream patch "Fix policy control for public shares" (Closes: #1151439): - CVE-2026-71195_Fix_policy_control_for_public_shares.patch Checksums-Sha1: c3f19276b1fe446f9c489ea8f110b94d01cb1f8d 3794 manila_23.0.0-4.dsc 6c06b2da57ef22d89b8ed5ac0518f5f50721095d 20240 manila_23.0.0-4.debian.tar.xz b7c5b247ea8f4b2d522d87811e610efee3898efb 16263 manila_23.0.0-4_amd64.buildinfo Checksums-Sha256: 71de522412cc443b9b5a9a25ff587415bfe94e26faf5777c3e0dde5b79b55057 3794 manila_23.0.0-4.dsc 3befec713cd6a98cb9345fc6968974809d8ebed65dd53e47942dbebf341f7b40 20240 manila_23.0.0-4.debian.tar.xz cdddb6867d98d098d6dd3d63f83ddd055bc7a0d67209d33109141ebdeb8bb792 16263 manila_23.0.0-4_amd64.buildinfo Files: bdb9df046d36efca02cb5ac8c2e946a6 3794 net optional manila_23.0.0-4.dsc e7470fd42656ab09088e401157bb1f67 20240 net optional manila_23.0.0-4.debian.tar.xz 32bd3716de3ae34ca6c15b1bf6e3b4b5 16263 net optional manila_23.0.0-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmrX0gsACgkQ1BatFaxr Q/4+FQ/+OzjwGKbMXirqa9sNzfit/obZMbPDW5JWZyWide4bgMrOdVkPNfBgxnVO uD1t8xoNNNVS63/CgkfOYDijCcmbDd7Yl9h7Xd8223ykcbPyUjjgsk54g2n5tlBB 7s1I76/jXm8g3TNK/QJ++Keb8dlFw7m9Jsd+z7p8MXRCzMPnhvPAIpocZDX4dWZf BSMr2rPoDIoB89dh7bMu4lgpxymO/EmF6NXNGXTmfEmX1YnO4cMmNLp7QDuFfguC Gtlyf9ZGn0MhbtL/1C9pg/U7OopBR6+Y6djUpv3DC2vdJkpegJEnJUJGRzo4S3lh qSTXr9nC2su4xScmYGW2lPru2BLU+V4bgP4QKzLFePbCC0+pTxJLKEDZVfkJ3Aqv 3LXrW01uVdYmujKgz+bU+f/FcswfSzHiWvqrI/+mw7wmJhSnHGHQFOUaHs4K3tXl o4YUucxh9pR+cfAZVy2R05vuAk8CDjlKYF/1p0kPOu4/dnnKL3kqYISoAYEjHRnt rgJLPDS9CZzeGY+oI60J/WaEgt7RlNUcE2Hs3Sz0EY/SvNAYaSdQLsMDEoAWGUZt bV7VhBbpG4wSL5f+2JS1mpyMTOCAOUC5MkSLiunEPic3sNDQroybCV6CFXC9Dkl6 FVZzRlf/sgPOpnwErYvHkeZNHvEypu3mkJ6mjLywFdUCLEXx/8Y= =Q/8w -----END PGP SIGNATURE-----