-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Nov 2026 09:53:31 +0100 Source: gnocchi Architecture: source Version: 4.6.5-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian OpenStack Changed-By: Thomas Goirand Closes: 1150009 Changes: gnocchi (4.6.5-1+deb13u1) trixie; urgency=medium . * OSSN-0112 / GHSA-cjq3-6hm7-q33w: Improper Access Control through /metric/v1/metric via POST parameter "resource_id". Added patch: "Enforce update resource policy metric creation" (Closes: #1150009): - OSSN-0112_Enforce-update-resource-policy-metric-creation.patch Checksums-Sha1: a7947b615d493150a97aa0f0480a66310e3a4de1 3561 gnocchi_4.6.5-1+deb13u1.dsc 354eaba95f74307bd242243190c4c9665ac826bd 13356 gnocchi_4.6.5-1+deb13u1.debian.tar.xz e39a60e28761c52b51e610880f9cb45231c57d37 18541 gnocchi_4.6.5-1+deb13u1_amd64.buildinfo Checksums-Sha256: b5c17ada7e40ae476c15f6ba44c0981c1ee4dea538467b24bf8539cc085612a4 3561 gnocchi_4.6.5-1+deb13u1.dsc 5757ea11b108a17ddceaa173289b3ffaf091fa7e732d8bc11f38d11012e14809 13356 gnocchi_4.6.5-1+deb13u1.debian.tar.xz 0d6323f0ef564d5bc31adecf6a840770da7d03a0e821a5ab21e24b23d3fe854a 18541 gnocchi_4.6.5-1+deb13u1_amd64.buildinfo Files: c03e172816c26d0666208f607345890a 3561 net optional gnocchi_4.6.5-1+deb13u1.dsc 00e2f1fe8ff0922937738fa3b25a8db9 13356 net optional gnocchi_4.6.5-1+deb13u1.debian.tar.xz d2de8f70451dfbd15f058d88a0661355 18541 net optional gnocchi_4.6.5-1+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmr0LnEACgkQ1BatFaxr Q/5emQ/9F+NI27jYNogzff8X0hLJYH5LJ3H9q8cNsHf5OwvqLdTSU8UzinA3kNrm zyBiK19kpl3C1jUjz4PySSExJGn13pRSEaXotAzl3cyJGCkmObiZsv3oet1AdhMY qHDySb+uDlpdGPvV3vCDIMhtJsta+7olU+NYMkn2i1/7wGu670SixnQLnAlGMYAC DfC0DR5uA1IYNu1DG1dgGid7hPgvtHRUQSKZ+OPHdCIo9Q1EzXL3wUioSUOnvHQ+ M6nBAK04OKWYZX+G7FuYZVNZeTH56gHPp8F6f3PE8XUiCLheb+f1R0KUmCPOMbU0 IF5tc3jvqkp1tIY+TY/c3PzIEuduM7jFUbdnGQTiM2IzfUjt7xmd+4pZzLg2fqS5 hLv2wlmQdzJsWMtnf4mwAlm/REVLGvWudJGM9sRZziZykqKNYj8OR6r4Cm6GPR1U zlXjKoiGv4rSCKu6wdpbko9XPLmyQZxQT1qkbmtVm/RBHZ+2TaXSo98zqsRA88h6 r8icT+lVex1rpveikXTDspgWOBn7QoHjOVGGT89/dHOXszd48KOjQlvcxSGCJn6P qDF/u/RYgJLhBt8dR8HdhhU21td30L2oChgShEuSLrd4+QE3w73ICoQcqCizWl0X CD5mcBtcA/WBawoUkOrI1ysHnGVlS1y5QU5ZGgs2Avd30A+kIy4= =S36Z -----END PGP SIGNATURE-----