From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Fri, 11 Jul 2025 14:45:24 +0200   
   Source: watcher   
   Architecture: source   
   Version: 14.0.0-1+deb13u1   
   Distribution: trixie   
   Urgency: medium   
   Maintainer: Debian OpenStack    
   Changed-By: Thomas Goirand    
   Closes: 1111692   
   Changes:   
    watcher (14.0.0-1+deb13u1) trixie; urgency=medium   
    .   
      * Add export OS_OSLO_MESSAGING_RABBIT__PROCESSNAME for all daemons.   
      * A vulnerability has been identified in OpenStack Nova and OpenStack   
   Watcher   
        in conjunction with volume swap operations performed by the Watcher   
        service. Under specific circumstances, this can lead to a situation where   
        two Nova libvirt instances could reference the same block device, allowing   
        accidental information disclosure to the unauthorized instance. Added   
        upstream patch: OSSN-0094_use_cinder_migrate_for_swap_volume.patch.   
        (Closes: #1111692).   
   Checksums-Sha1:   
    9f0a111f452d4daec5c24c3b0c87c5802d686a0b 3705 watcher_14.0.0-1+deb13u1.dsc   
    a76e9a73c8070f885116e9699120d86d436487b8 907780 watcher_14.0.0.orig.tar.xz   
    bced04ba1c75a9f59f4199a6db87577e16adb64a 14996 watcher_14.0.0-1   
   deb13u1.debian.tar.xz   
    7d92c20be7bf827a8b56d0e087c02fcb226fcf44 18349 watcher_14.0.0-1   
   deb13u1_amd64.buildinfo   
   Checksums-Sha256:   
    53a8194010d1c8c0dd4932f9d71f1dc25ce6cbe3b1e97da804aea7c60c54b3fb 3705   
   watcher_14.0.0-1+deb13u1.dsc   
    c6076687dc2f162c057798821bd450e1081b744765b4255abc7cccbe9200d5dd 907780   
   watcher_14.0.0.orig.tar.xz   
    fc9917b69913a9339b030ffb231b5a2615eeed87aeafa3078c7fc6e20e335ca0 14996   
   watcher_14.0.0-1+deb13u1.debian.tar.xz   
    bc7e522c1999e07dd304d077e94e28941db36891854250c7a442bc7dd995942f 18349   
   watcher_14.0.0-1+deb13u1_amd64.buildinfo   
   Files:   
    b70c9dfa8af46771fee94e4599ca0614 3705 net optional watcher_14.0   
   0-1+deb13u1.dsc   
    bcf70d9f55c78234f301b44256f02f44 907780 net optional watcher_14   
   0.0.orig.tar.xz   
    87890f2d1496a1d9e1b9ee067627f134 14996 net optional watcher_14.   
   .0-1+deb13u1.debian.tar.xz   
    c20656ccfd46b5d7e5c075a47026883e 18349 net optional watcher_14.   
   .0-1+deb13u1_amd64.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmkMY54ACgkQ1BatFaxr   
   Q/61/A//VN32f7TAK96Mo2kBq4wyACTuuCbSZdw89+mDDfHQARCYoL2ZiTGACoqD   
   slNrdW/HQimtzEjEGFxatK87PmkQ62Fy29sAbJQbJWbF3IHKWZfOro+CgseMFOEW   
   JYXj84v5qgy01LT8gPp8s/VdEoDV0dTRBwIG7wI65qmpOg5VN0T108EhybpwpDfj   
   CZkmzisCaTn8c3Az75GhtxWXK30Ojgkx4JRpx1iXUef1zDq6eYASPg7I+Oa2/QHR   
   Ul/rXXlcJWIEUGw/YBrZ5fwkQWRYnWrSEHdbAzYZ3nrDL+Pt+MwMMGdY/U5Ymjvc   
   OeRL7qpHdRp3FDMvTwf+cQTRiE2bgPPDHwci930fn1kbHa1cPt5YZR7HX4ql8Tba   
   zWZWuags78ey89UgG6b9l35HQXrv5ugtGyF29vHDEu+r/xeOCogk0Du9PZVCrspd   
   IyRrsWVftkME7V/YeXJsRlgdoGh2WCjNoAomalku53l9rtCZqiEhZEsLFq58nOit   
   4p5FkJopSVADXGWGRNYcENHbVdPX9IjSOBOAwXEp36MdiCJfzLZwwzD9owPJJHPc   
   9ZxL+c3UX6eIG/WOemxkfd6NDQyMk7kYkxusdj2KijSLCZ/ubJFAhfGIOgjIJDAg   
   3avPf5D7Up2/Q1FFCb7IoFn2qpA5RZrNiHnE2rgeC41I8YqrxhA=   
   =DbeL   
   -----END PGP SIGNATURE-----   
      
      
   --==============‚19919954716291732=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaQz3uwAKCRCb9qggYcy5   
   IehHAQDXlJdnjASrwxJ0bpkS+Nf9sC49gkrL+9H+IkL+WYCC8wD/SRikBzUDTNb9   
   MjpeH89MDrz8Sj6sm0a0R3CJwooH9AQ=7LDl   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)