-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Mar 2024 11:42:43 +0100 Source: python-oslo.messaging Architecture: source Version: 14.0.3-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian OpenStack Changed-By: Thomas Goirand Closes: 1138848 Changes: python-oslo.messaging (14.0.3-0+deb12u1) bookworm-security; urgency=medium . * New upstream release. * Add patches: - Implement_get_rpc_client_function.patch - Support_overriding_class_for_get_rpc_helper_functions.patch * CVE-2026-44393 / OSSN-0096: oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake. Added upstream patch: Fix RabbitMQ TLS hostname verification (Closes: #1138848). Checksums-Sha1: 29d39bb126166c216fe43eaf88a983a3a4fd0752 2900 python-oslo.messaging_14.0.3-0+deb12u1.dsc b7824e99203da272489fd6d2a891802685821d34 185176 python-oslo.messaging_14.0.3.orig.tar.xz a4b2f05af7da001636b4c0301512047fc07e74f7 14776 python-oslo.messaging_14.0.3-0+deb12u1.debian.tar.xz 6fdf78a4bca80095437f5629aec9fa2cde1e9704 13218 python-oslo.messaging_14.0.3-0+deb12u1_amd64.buildinfo Checksums-Sha256: 75a12529f33d2b265ae83d53fd6464eef23175be6ec578e61b4a6ef56ffa7138 2900 python-oslo.messaging_14.0.3-0+deb12u1.dsc 8762f506b07732b58260d7e137d275c9e1a6af021234728d520fbe78a092a414 185176 python-oslo.messaging_14.0.3.orig.tar.xz feda56af27c0044cd808d53c93305e167039bdee6f0849105775c8a7a5e0aaa5 14776 python-oslo.messaging_14.0.3-0+deb12u1.debian.tar.xz 86a44c79a6ab8459667a5dc94079c33490d4d0eec8cd6e2ab9f98b49b062f3b8 13218 python-oslo.messaging_14.0.3-0+deb12u1_amd64.buildinfo Files: ca9e546aec2e91f313c93f10a8cad456 2900 python optional python-oslo.messaging_14.0.3-0+deb12u1.dsc c3cb8c007dbf4632142d1f235d1cc9a8 185176 python optional python-oslo.messaging_14.0.3.orig.tar.xz ca24d7335d039a3b313377e2e3431059 14776 python optional python-oslo.messaging_14.0.3-0+deb12u1.debian.tar.xz 782badd9a573ef830ddc11c76f93d11b 13218 python optional python-oslo.messaging_14.0.3-0+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmopgJoACgkQ1BatFaxr Q/4JQBAAiy0iMN+F91BT/t8qA6jbt9tqSMeoOaSTiOrVmtLYQflne/ROp78QAATr 0WfO7eGhoID1o6EiytrQYYR/Fxh9/G+Mu9mu1iW2lPPo64F12jQs6BYlFvFSP7Nn dN0lTJmem7ay0Dt16+9rRHVmHTnEAOjjy0PfZy4FujfpcGmt5+PoQoVCHsvYAu2p q9/MIbY219Ox322aKv2J2M6+a5km6RZHiJqkkjhBv07tKA79RErp/3Oty13baa0G s2VT+W32Mu7C0f4QZC0tDzwJsw1FxRKv8mPb1ifQpB5QBdFi3ObVA88wm2hM/OD4 EqL0S1LbEg2JpCVKDnYuQqmNwTlqtJj0ShAmmkLG5O5DR0rri8EJi+ykj3zySybn gTXy2aFEh8pjGqXCTPrj4peBv8P8qxkiSrysDvEU5QbV5ORu7U+/8Mn5VL1ubtVY 64eWfTT5oesdONpHhQOEsPWkq9QZHvYpBSVVHZVs/enGm8LJ5HcavOT/ymDo5Ti9 cdOPQcrux1IqwNhqAIU49VWTvkEqfL0XdGPJcI9ORUPPl0rzd1iIancxookXa4/L /petbbrAMreH7CCXJOel8KbnrARKb2m9hYy8sys/ZyETIeBx/ZyqPwu5e7hmlwfQ 6bc+x3zV1R5XVUvvu+oGpsEHJYy3cyPuQT6+WTK2cszcV2R4RVQ= =KJww -----END PGP SIGNATURE-----