Debian Package Tracker
Register | Log in
Subscribe

glance

OpenStack Image Registry and Delivery Service - Daemons

Choose email to subscribe with

general
  • source: glance (main)
  • version: 2:32.0.0~rc2-2
  • maintainer: Debian OpenStack (DMD)
  • uploaders: Thomas Goirand [DMD] – Michal Arbet [DMD]
  • arch: all
  • std-ver: 4.5.1
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2:21.0.0-2+deb11u1
  • o-o-sec: 2:21.1.0-1+deb11u2
  • oldstable: 2:25.1.0-2+deb12u1
  • old-sec: 2:25.1.0-2+deb12u1
  • stable: 2:30.0.0-3
  • testing: 2:32.0.0~rc2-2
  • unstable: 2:32.0.0~rc2-2
versioned links
  • 2:21.0.0-2+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2:21.1.0-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2:25.1.0-2+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2:30.0.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2:32.0.0~rc2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2:32.0.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • glance
  • glance-api
  • glance-common
  • glance-doc
  • python3-glance
action needed
Marked for autoremoval on 05 May due to python-orjson: #1131588 high
Version 2:32.0.0~rc2-2 of glance is marked for autoremoval from testing on Tue 05 May 2026. It depends (transitively) on python-orjson, affected by #1131588. You should try to prevent the removal by fixing these RC bugs.
Created: 2026-03-29 Last update: 2026-04-01 17:49
lintian reports 11 warnings normal
Lintian reports 11 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2026-03-27 Last update: 2026-03-27 23:01
Multiarch hinter reports 1 issue(s) low
There are issues with the multiarch metadata for this package.
  • glance-doc could be marked Multi-Arch: foreign
Created: 2016-09-14 Last update: 2026-04-01 17:50
1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:
  • CVE-2026-34881: (needs triaging) OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-03-20 Last update: 2026-04-01 15:01
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2026-34881: (needs triaging) OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-03-20 Last update: 2026-04-01 15:01
debian/patches: 1 patch to forward upstream low

Among the 3 debian patches available in version 2:32.0.0~rc2-2 of the package, we noticed the following issues:

  • 1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2026-03-27 23:30
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.5.1).
Created: 2021-08-18 Last update: 2026-04-01 18:00
testing migrations
  • excuses:
    • Migration status for glance (2:32.0.0~rc2-2 to 2:32.0.0-1): Waiting for test results or another package, or too young (no action required now - check later)
    • Issues preventing migration:
    • ∙ ∙ Piuparts check waiting for test results - https://piuparts.debian.org/sid/source/g/glance.html
    • ∙ ∙ Autopkgtest for glance/2:32.0.0-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Test triggered
    • ∙ ∙ Lintian check waiting for test results - info
    • ∙ ∙ Too young, only 0 of 5 days old
    • Additional info (not blocking):
    • ∙ ∙ Reproduced on amd64
    • ∙ ∙ Reproduced on arm64
    • ∙ ∙ Reproduced on armhf
    • ∙ ∙ Reproduced on i386
    • ∙ ∙ Reproduced on ppc64el
    • Not considered
news
[rss feed]
  • [2026-04-01] Accepted glance 2:32.0.0-1 (source) into unstable (Thomas Goirand)
  • [2026-03-31] glance 2:32.0.0~rc2-2 MIGRATED to testing (Debian testing watch)
  • [2026-03-27] Accepted glance 2:32.0.0~rc2-2 (source) into unstable (Thomas Goirand)
  • [2026-03-27] Accepted glance 2:32.0.0~rc2-1 (source) into unstable (Thomas Goirand)
  • [2026-03-24] glance 2:31.0.0-4 MIGRATED to testing (Debian testing watch)
  • [2026-03-20] Accepted glance 2:31.0.0-4 (source) into unstable (Thomas Goirand)
  • [2026-03-20] Accepted glance 2:32.0.0~rc1-4 (source) into experimental (Thomas Goirand)
  • [2026-03-19] Accepted glance 2:32.0.0~rc1-3 (source) into experimental (Thomas Goirand)
  • [2026-03-19] Accepted glance 2:31.0.0-3 (source) into unstable (Thomas Goirand)
  • [2026-03-14] Accepted glance 2:32.0.0~rc1-2 (source) into experimental (Thomas Goirand)
  • [2026-03-14] Accepted glance 2:32.0.0~rc1-1 (source) into experimental (Thomas Goirand)
  • [2026-02-11] glance 2:31.0.0-2 MIGRATED to testing (Debian testing watch)
  • [2026-02-08] Accepted glance 2:31.0.0-2 (source) into unstable (Thomas Goirand)
  • [2025-10-04] glance 2:31.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2025-10-01] Accepted glance 2:31.0.0-1 (source) into unstable (Thomas Goirand)
  • [2025-10-01] glance 2:31.0.0~rc1-2 MIGRATED to testing (Debian testing watch)
  • [2025-09-28] Accepted glance 2:31.0.0~rc1-2 (source) into unstable (Thomas Goirand)
  • [2025-09-19] Accepted glance 2:31.0.0~rc1-1 (source) into experimental (Thomas Goirand)
  • [2025-07-18] glance 2:30.0.0-3 MIGRATED to testing (Debian testing watch)
  • [2025-07-12] Accepted glance 2:30.0.0-3 (source) into unstable (Thomas Goirand)
  • [2025-04-05] glance 2:30.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2025-04-02] Accepted glance 2:30.0.0-1 (source) into unstable (Thomas Goirand)
  • [2025-03-31] glance 2:30.0.0~rc1-2 MIGRATED to testing (Debian testing watch)
  • [2025-03-28] Accepted glance 2:30.0.0~rc1-2 (source) into unstable (Thomas Goirand)
  • [2025-03-20] Accepted glance 2:30.0.0~rc1-1 (source) into experimental (Thomas Goirand)
  • [2025-01-16] glance 2:29.0.0-4 MIGRATED to testing (Debian testing watch)
  • [2025-01-14] Accepted glance 2:29.0.0-4 (source) into unstable (Thomas Goirand)
  • [2024-12-22] glance 2:29.0.0-3 MIGRATED to testing (Debian testing watch)
  • [2024-12-19] Accepted glance 2:29.0.0-3 (source) into unstable (Thomas Goirand)
  • [2024-11-30] glance 2:29.0.0-2 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian (0, 11)
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • l10n (-, 100)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2:32.0.0~rc2-0ubuntu1
  • 7 bugs (1 patch)
  • patches for 2:32.0.0~rc2-0ubuntu1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing