-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 21 Aug 2025 09:10:49 +0200 Source: nova Binary: nova-api nova-common nova-compute nova-compute-ironic nova-compute-kvm nova-compute-lxc nova-compute-qemu nova-conductor nova-consoleproxy nova-doc nova-scheduler python3-nova Architecture: all Version: 2:31.0.0-6+deb13u1 Distribution: trixie Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Thomas Goirand Description: nova-api - OpenStack Compute - compute API frontend nova-common - OpenStack Compute - common files nova-compute - OpenStack Compute - compute node nova-compute-ironic - OpenStack Compute - compute node (Ironic) nova-compute-kvm - OpenStack Compute - compute node (KVM) nova-compute-lxc - OpenStack Compute - compute node (LXC) nova-compute-qemu - OpenStack Compute - compute node (QEmu) nova-conductor - OpenStack Compute - conductor service nova-consoleproxy - OpenStack Compute - NoVNC proxy nova-doc - OpenStack Compute - documentation nova-scheduler - OpenStack Compute - virtual machine scheduler python3-nova - OpenStack Compute - libraries Closes: 1111689 Changes: nova (2:31.0.0-6+deb13u1) trixie; urgency=high . * A vulnerability has been identified in OpenStack Nova and OpenStack Watcher in conjunction with volume swap operations performed by the Watcher service. Under specific circumstances, this can lead to a situation where two Nova libvirt instances could reference the same block device, allowing accidental information disclosure to the unauthorized instance. Added upstream patch: OSSN-0094_restrict_swap_volume_to_cinder.patch. (Closes: #1111689). * Blacklist non-deterministic unit test: - ComputeTestCase.test_add_remove_fixed_ip_updates_instance_updated_at Checksums-Sha1: ab4238845808147dbac9c14054d64c83b9c190ea 32424 nova-api_31.0.0-6+deb13u1_all.deb 9beb042a406612476d0979b59b90d4dd4344b3b7 138484 nova-common_31.0.0-6+deb13u1_all.deb 8d979f578fcd5cc493833eff69ffe5eb69fd5f4d 10592 nova-compute-ironic_31.0.0-6+deb13u1_all.deb ec6b5f5f6d6651a0ffeb45fe54cd77a9c851f023 10824 nova-compute-kvm_31.0.0-6+deb13u1_all.deb d059d2bc7def2eaf1d5bd3d93b66c74db2b98153 10656 nova-compute-lxc_31.0.0-6+deb13u1_all.deb 6afff5e4fe81fd01553977ed2d354015a3c29a71 10676 nova-compute-qemu_31.0.0-6+deb13u1_all.deb b7c38545dd1092978a3bb247b2d6fd105e45ed70 17216 nova-compute_31.0.0-6+deb13u1_all.deb 91b88372506aa0533e9b3e7d554db6f79c270402 16536 nova-conductor_31.0.0-6+deb13u1_all.deb 8180e553e31ebfffb4e863452364106fb2df03f8 21812 nova-consoleproxy_31.0.0-6+deb13u1_all.deb 387973a78b6d5ca2e0d14f4ec2b8fdf8fb31b2c5 3214328 nova-doc_31.0.0-6+deb13u1_all.deb dacabf4cbb493cd3cfd4e337c15f20f307fcb435 16556 nova-scheduler_31.0.0-6+deb13u1_all.deb 85bd8e63bede23174fe5a7096c9023fb3030bb14 25700 nova_31.0.0-6+deb13u1_all-buildd.buildinfo ecaa50845cacd6ae3198f3d66d72d59d99d953d7 3092104 python3-nova_31.0.0-6+deb13u1_all.deb Checksums-Sha256: aeb40c93360da93e49dd62654697482ea22db9527803bf4c177683f3b73b4f29 32424 nova-api_31.0.0-6+deb13u1_all.deb ee0bb7c164d6a35594423f5521e0f67c7562b05612bd7957d97486ea2b137309 138484 nova-common_31.0.0-6+deb13u1_all.deb 4821c048fbae19fb86234fc5f573529b9a03c8820be49bac2c2be11831222143 10592 nova-compute-ironic_31.0.0-6+deb13u1_all.deb cec7e3ee2c84ca8f2c229d8238f108d00f5af5cebd91d3824a775173dcb6b7c2 10824 nova-compute-kvm_31.0.0-6+deb13u1_all.deb ee429434533137ab97c2b432bebf5ea166f6c26b4d55f69d7ee91639edf86d04 10656 nova-compute-lxc_31.0.0-6+deb13u1_all.deb e060e69530002b8298b1247fd7617e96d8b2eaa5c21eded0cc6d93a5dba11c11 10676 nova-compute-qemu_31.0.0-6+deb13u1_all.deb 7ac8e951f7246cee5d7f53c8746beccc95e89e6b442032d68b77974b5f608d90 17216 nova-compute_31.0.0-6+deb13u1_all.deb beff191b6a18fb48c391ccd5be8c788392ec09cb99ef75cf26cd595eeddecdcb 16536 nova-conductor_31.0.0-6+deb13u1_all.deb 6ba5ae52a707c71ec71f09c5521a5be2b3068aa7175fdc69bc9ab72c81096252 21812 nova-consoleproxy_31.0.0-6+deb13u1_all.deb c83f1b3939e97ef9f1f6856414e48972b80a65748ece038fc44df30280d71d92 3214328 nova-doc_31.0.0-6+deb13u1_all.deb 134ac28d022d5b9c1f4ead02eef7161436699c1a33f11c5ede607d2f9cfa0b3d 16556 nova-scheduler_31.0.0-6+deb13u1_all.deb 732060e5c94e7af8142ceb0985d1a505d39b3cb1b505dfcaf67e4b831d729547 25700 nova_31.0.0-6+deb13u1_all-buildd.buildinfo a3af6191729a7eaaccdab770239dde1baeae500c59393d7beca89042aefe076d 3092104 python3-nova_31.0.0-6+deb13u1_all.deb Files: 5305b64ea505c133cd0a130455732eba 32424 net optional nova-api_31.0.0-6+deb13u1_all.deb 807782108056e1b59afcf6b1b46f6280 138484 net optional nova-common_31.0.0-6+deb13u1_all.deb b9d18742642918ad7698e99259094487 10592 net optional nova-compute-ironic_31.0.0-6+deb13u1_all.deb 363487f3e856ab37c391ad765ff64b28 10824 net optional nova-compute-kvm_31.0.0-6+deb13u1_all.deb 871273858f7cce1322b9564d3db6b00f 10656 net optional nova-compute-lxc_31.0.0-6+deb13u1_all.deb a9b736ccbd1a8ebccd34891300398e3b 10676 net optional nova-compute-qemu_31.0.0-6+deb13u1_all.deb f55a7b29c6071e2a78408ab272365435 17216 net optional nova-compute_31.0.0-6+deb13u1_all.deb 97ae7f7142b258f79abe3d09b14d940f 16536 net optional nova-conductor_31.0.0-6+deb13u1_all.deb 74009e0a893612ecd0c61db4d549d43b 21812 net optional nova-consoleproxy_31.0.0-6+deb13u1_all.deb c9b8a8cbdb4a96703f0a44eb0c30fecc 3214328 doc optional nova-doc_31.0.0-6+deb13u1_all.deb 797dd80bada6048258f8291e9ebbdd70 16556 net optional nova-scheduler_31.0.0-6+deb13u1_all.deb 2011f22892aa22d18aa70bf2f9220686 25700 net optional nova_31.0.0-6+deb13u1_all-buildd.buildinfo 1047d78987ada479bf708f7f49c7428e 3092104 python optional python3-nova_31.0.0-6+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmkL1KAACgkQx30Wh8LX l/YNxQ/9FwlyOPVNtQdGTnYTfbSqrIy+fq4Oaiol1DE9Qa9B7ZRK2MTLgyOtMLpI KzO0B9jQ5xKtOojV7WEdoIQmrFX/gNPBYuGChS2buWsS0MRfRyZm4OE1SVIsDDMQ ESATPbZPGOrcmSjlsSSqA6TtbLnf64HiQLZSpsK2NzJ7Ht3I47VTPpsqV5ImWD8R Azsx4PjVNxrQeUU3AB5H0pqorUmDMnEuZReTj0fmNAjYJc3XFOzPLRohmaBej6b8 MDmQ+lLzZ0eqlIFBAjylsQymrDdgxn+25tVAhRqOwP028de4EP3v82nQSyBEOw4U dbElA0bP2iLS3qdifsFRVK9KFLmuz3pGFJDjupcZ2OZ7gh1KtC5w3d/DEDOhB5zA P7bt31ZeJzMr6yCHEd9JIE1R9+bzkahorH7iUWcYZvytokZAkj7KmkRfyevc4Hsj vxo8KcgnYMAOGTKovJT0Bq9TwvjFDPi1TbML9EQilwUb3d2ad3g6cYm34VlAihmH jmNtpOhdF+qXCq2ATFg8IW4FrJxW4DRpmei+zAFHn3NnphqYvxy1k8/YO76krHbW N6gVdwiV4vMtjXbz6iCplgpzU4dGZ06DmpoTMLOn+f+nEDzDZ4aEtaDbzubKjwOK C9E/0/vxJ7libcxR+rgxKnEFJ6zGG8/oyPf1Y40UFALtj1/Ehhg= =vOHp -----END PGP SIGNATURE-----