Version 5.7.0-5 of python-glance-store is marked for autoremoval from testing on Wed 25 Nov 2026. It depends (transitively) on python-botocore, affected by #1145153. You should try to prevent the removal by fixing these RC bugs.
CVE-2026-51773:
An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.7.4 instead of
4.5.0).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-glance-store.png){kind=link}