-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Jul 2025 14:45:24 +0200
Source: watcher
Architecture: source
Version: 14.0.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1111692
Changes:
 watcher (14.0.0-1+deb13u1) trixie; urgency=medium
 .
   * Add export OS_OSLO_MESSAGING_RABBIT__PROCESSNAME for all daemons.
   * A vulnerability has been identified in OpenStack Nova and OpenStack Watcher
     in conjunction with volume swap operations performed by the Watcher
     service. Under specific circumstances, this can lead to a situation where
     two Nova libvirt instances could reference the same block device, allowing
     accidental information disclosure to the unauthorized instance. Added
     upstream patch: OSSN-0094_use_cinder_migrate_for_swap_volume.patch.
     (Closes: #1111692).
Checksums-Sha1:
 9f0a111f452d4daec5c24c3b0c87c5802d686a0b 3705 watcher_14.0.0-1+deb13u1.dsc
 a76e9a73c8070f885116e9699120d86d436487b8 907780 watcher_14.0.0.orig.tar.xz
 bced04ba1c75a9f59f4199a6db87577e16adb64a 14996 watcher_14.0.0-1+deb13u1.debian.tar.xz
 7d92c20be7bf827a8b56d0e087c02fcb226fcf44 18349 watcher_14.0.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 53a8194010d1c8c0dd4932f9d71f1dc25ce6cbe3b1e97da804aea7c60c54b3fb 3705 watcher_14.0.0-1+deb13u1.dsc
 c6076687dc2f162c057798821bd450e1081b744765b4255abc7cccbe9200d5dd 907780 watcher_14.0.0.orig.tar.xz
 fc9917b69913a9339b030ffb231b5a2615eeed87aeafa3078c7fc6e20e335ca0 14996 watcher_14.0.0-1+deb13u1.debian.tar.xz
 bc7e522c1999e07dd304d077e94e28941db36891854250c7a442bc7dd995942f 18349 watcher_14.0.0-1+deb13u1_amd64.buildinfo
Files:
 b70c9dfa8af46771fee94e4599ca0614 3705 net optional watcher_14.0.0-1+deb13u1.dsc
 bcf70d9f55c78234f301b44256f02f44 907780 net optional watcher_14.0.0.orig.tar.xz
 87890f2d1496a1d9e1b9ee067627f134 14996 net optional watcher_14.0.0-1+deb13u1.debian.tar.xz
 c20656ccfd46b5d7e5c075a47026883e 18349 net optional watcher_14.0.0-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmkMY54ACgkQ1BatFaxr
Q/61/A//VN32f7TAK96Mo2kBq4wyACTuuCbSZdw89+mDDfHQARCYoL2ZiTGACoqD
slNrdW/HQimtzEjEGFxatK87PmkQ62Fy29sAbJQbJWbF3IHKWZfOro+CgseMFOEW
JYXj84v5qgy01LT8gPp8s/VdEoDV0dTRBwIG7wI65qmpOg5VN0T108EhybpwpDfj
CZkmzisCaTn8c3Az75GhtxWXK30Ojgkx4JRpx1iXUef1zDq6eYASPg7I+Oa2/QHR
Ul/rXXlcJWIEUGw/YBrZ5fwkQWRYnWrSEHdbAzYZ3nrDL+Pt+MwMMGdY/U5Ymjvc
OeRL7qpHdRp3FDMvTwf+cQTRiE2bgPPDHwci930fn1kbHa1cPt5YZR7HX4ql8Tba
zWZWuags78ey89UgG6b9l35HQXrv5ugtGyF29vHDEu+r/xeOCogk0Du9PZVCrspd
IyRrsWVftkME7V/YeXJsRlgdoGh2WCjNoAomalku53l9rtCZqiEhZEsLFq58nOit
4p5FkJopSVADXGWGRNYcENHbVdPX9IjSOBOAwXEp36MdiCJfzLZwwzD9owPJJHPc
9ZxL+c3UX6eIG/WOemxkfd6NDQyMk7kYkxusdj2KijSLCZ/ubJFAhfGIOgjIJDAg
3avPf5D7Up2/Q1FFCb7IoFn2qpA5RZrNiHnE2rgeC41I8YqrxhA=
=DbeL
-----END PGP SIGNATURE-----