-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Jun 2025 11:21:22 +0200
Source: python-oslo.messaging
Architecture: source
Version: 16.1.0-3+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1138848
Changes:
 python-oslo.messaging (16.1.0-3+deb13u1) trixie-security; urgency=medium
 .
   * Add fix-not-using-non-durable.patch.
   * CVE-2026-44393 / OSSN-0096: oslo.messaging does not verify RabbitMQ broker
     hostname during TLS handshake. Added upstream patch: Fix RabbitMQ TLS
     hostname verification (Closes: #1138848).
Checksums-Sha1:
 55710866b3a21aa04ad8faddbda4deb3f14fb0cb 2906 python-oslo.messaging_16.1.0-3+deb13u1.dsc
 1e041ff1b046374496906a18fad1b12007f85b94 148044 python-oslo.messaging_16.1.0.orig.tar.xz
 9554eff02375fbbabc027d395f4c76b03ead2551 11612 python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz
 d15f559d66724a1a6eb25809fd6b89975a9992bc 13177 python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo
Checksums-Sha256:
 a768722f01b8c10e9d1d3d2aa05a712af2faa31a8d9ae870b38e3cdd15dcf120 2906 python-oslo.messaging_16.1.0-3+deb13u1.dsc
 032ebc4b1011cb4bc5f69edd0a7426f3e9e9e33b76d475f17d7a36c9bcae43ec 148044 python-oslo.messaging_16.1.0.orig.tar.xz
 500fd536b28d0d0932648843011779ce637f3d00aada39ca94bfc4a5fa6b1211 11612 python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz
 27da406d32e8cfb6addf1d723dd0614d59270e44e2175d6824cd094397aea82b 13177 python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo
Files:
 abdff89be59f441aa7f55ac1b6ef7cdb 2906 python optional python-oslo.messaging_16.1.0-3+deb13u1.dsc
 091b3683775dc9933e90a5df1031ce09 148044 python optional python-oslo.messaging_16.1.0.orig.tar.xz
 680784abbfa88e3f49e44630d864d1c3 11612 python optional python-oslo.messaging_16.1.0-3+deb13u1.debian.tar.xz
 b8b86ae4b78ba61ebd97c41d4b314c10 13177 python optional python-oslo.messaging_16.1.0-3+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MlcZ
-----END PGP SIGNATURE-----