-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Nov 2026 10:52:54 +0100 Source: ironic Architecture: source Version: 1:39.0.0-7 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1152544 Changes: ironic (1:39.0.0-7) unstable; urgency=medium . * CVE-2026-115638 / OSSA-2026-049: Ironic Conductor DoS via gzip bomb configdrive. Applied upstream patch "Chunk gzip decompressions and enforce a limit" (Closes: #1152544): - CVE-2026-115638_OSSA-2026-049_Chunk-gzip-decompressions-and-enf....patch Checksums-Sha1: 85659233ae18cb16ffb91ceef6bf39e37e62ad85 4101 ironic_39.0.0-7.dsc 2a875b626dd71382caecad06957148e8aa22724b 29400 ironic_39.0.0-7.debian.tar.xz ebac335b19a1944c69c8f00dc6f841be2b76e27e 22269 ironic_39.0.0-7_amd64.buildinfo Checksums-Sha256: f1b6dc81dc7fe11ba474c8bd5420a9d848487899d3eafd826b3cae65394f6709 4101 ironic_39.0.0-7.dsc 9bf9d5560f727eb8dd4cfd612bc7f973fa324bf71f72ec72080494c6709a1456 29400 ironic_39.0.0-7.debian.tar.xz c5fb265a6606eae75336c53fda1cc7a2381361d70893ebf48d5b313344c35a3b 22269 ironic_39.0.0-7_amd64.buildinfo Files: c55e7109b08603855b86fee285d64b11 4101 net optional ironic_39.0.0-7.dsc ec9ee0f92359a0de2904ac4a7fb4c25a 29400 net optional ironic_39.0.0-7.debian.tar.xz 570cee20e1cc86303c4094a69f5e3af4 22269 net optional ironic_39.0.0-7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmroX88ACgkQ1BatFaxr Q/5vXRAAjEBi0C4eiP68pKbtqve1xuT0aCAJSpk7MAyDJEllZJufdqb6T0yVptVL IL7kYnU/ruIiRkEcAE/XUyVL7zGD7pfnUZGKRKOFkk3bLxLU2PFd3ckk6i+WAgXe l/S4pnb+M7LssWNN8OwV5/83j83S+aLZft1zXhjF5mwnC9djObVx0DbaYpnXLiw7 fn1B+Tdll2lLCtGqHf8xbckBCjlz+1IofnnnNxif9U34ETaeWsUzufNZJOJV0fCY 9EvyaN/CwhgC29OEMjT3y0RqHHBS3qGkfzo0bBee/GnW/fNW8ROaFrasrSQZF0cE nJusnqkulJeJrjFZzcv02H4swik35ym5VeEFOGNZjX2TZCw7/zLYLJyJoBpw1N38 DRmf2jktoGYxpStBUax+dwd5L3gn08COh/alS5Q6FLVvWWo40Im4JVcu0vBXNWbJ Pcslwj9LPdpOS50h4RFuHHmsuJaz5NSMS33/YaaGMoCn1qyE3s1WExwDzm3zk9KG Nwf4szBqd4cD3+obpZz9tMOs8A7D408vBQUKHoWweMjqJjkyN+2H3TLP9gkSbg7e bcf9ZZoFOcjADnIJFq7576p51H8FfKRmNtT++ceMJmEvjRQNHS2xv5Zb+dYbFQ9w tWW+MFPpSLeltgEmAQNqgXL06dlABlqBkKEoOieNTbv7yLez/Jc= =jleI -----END PGP SIGNATURE-----
