-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Oct 2026 23:15:31 +0200
Source: manila
Architecture: source
Version: 1:20.0.0-3+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1151439
Changes:
 manila (1:20.0.0-3+deb13u2) trixie; urgency=medium
 .
   * Add /usr/bin/privsep-helper to the sudoers rules: manila now uses
     oslo.privsep ("sudo privsep-helper") instead of rootwrap to run
     privileged commands, and the share service runs as the manila user.
     Without this, the LVM driver initialization fails with
     FailedToDropPrivileges and manila-share never becomes available to
     the scheduler.
   * CVE-2026-71195 / OSSA-2026-046: Manila allows cross-project
     public-share and export-metadata changes. Applied upstream patch
     "Fix policy control for public shares" (Closes: #1151439):
     - CVE-2026-71195_Fix_policy_control_for_public_shares.patch
Checksums-Sha1:
 e0975e154bc33b7837626b42493c4d4a1df2547a 3868 manila_20.0.0-3+deb13u2.dsc
 4311819f246de3024349cbb2e1160dd55ded3e45 18580 manila_20.0.0-3+deb13u2.debian.tar.xz
 5312026d5dfeae006745671bda572a01376aa284 17711 manila_20.0.0-3+deb13u2_amd64.buildinfo
Checksums-Sha256:
 0693ac37ca053b016e8caca6de08eadd90697cec712e0ac63f4e643a76684fe5 3868 manila_20.0.0-3+deb13u2.dsc
 64917b5508138967080bc15bc2d720b7f4a8e19276b9252f7cab718b3280773a 18580 manila_20.0.0-3+deb13u2.debian.tar.xz
 9fbdbfdac64ed86249d34c79b69ed98da89393fa549197c67e2b77788a6ba22b 17711 manila_20.0.0-3+deb13u2_amd64.buildinfo
Files:
 e2348909d47002d0347755a3f0bd12a4 3868 net optional manila_20.0.0-3+deb13u2.dsc
 2148362ac4ca7312b8d6bcb368372e10 18580 net optional manila_20.0.0-3+deb13u2.debian.tar.xz
 ba847d06529a5ac61e959082d7b5bb5c 17711 net optional manila_20.0.0-3+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=XQtV
-----END PGP SIGNATURE-----