Version 1:10.0.0-2 of manila is marked for autoremoval from testing on Fri 21 Aug 2020. It depends (transitively) on grpc, kazoo, python-murano-pkg-check, affected by #963398, #964569, #966653. You should try to prevent the removal by fixing these RC bugs.
CVE-2020-9543: OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
Please fix it.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.5.0 instead of
4.4.1).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/m/manila.png){kind=link}