-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Nov 2026 09:53:31 +0100 Source: gnocchi Binary: gnocchi-api gnocchi-common gnocchi-metricd gnocchi-statsd python3-gnocchi Architecture: all Version: 4.6.5-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Thomas Goirand Description: gnocchi-api - Metric as a Service - API daemon gnocchi-common - Metric as a Service - common files gnocchi-metricd - Metric as a Service - metric daemon gnocchi-statsd - Metric as a Service - statsd daemon python3-gnocchi - Metric as a Service - Python 3.x Closes: 1150009 Changes: gnocchi (4.6.5-1+deb13u1) trixie; urgency=medium . * OSSN-0112 / GHSA-cjq3-6hm7-q33w: Improper Access Control through /metric/v1/metric via POST parameter "resource_id". Added patch: "Enforce update resource policy metric creation" (Closes: #1150009): - OSSN-0112_Enforce-update-resource-policy-metric-creation.patch Checksums-Sha1: 0582f1f28c50f65519a4f51edfb357e71fb2fda2 25552 gnocchi-api_4.6.5-1+deb13u1_all.deb fd367237903a88a96708d6d027f198ed693ea6e6 30456 gnocchi-common_4.6.5-1+deb13u1_all.deb 490cd918963a225b61aed3526f157bdeb3be6be1 7376 gnocchi-metricd_4.6.5-1+deb13u1_all.deb 3dfc9d478b6d7873a0f8b22a990dc6793f51cd15 7368 gnocchi-statsd_4.6.5-1+deb13u1_all.deb 842439eb1a29f5c2d1a8c30d992a4d7fd55e5a56 18275 gnocchi_4.6.5-1+deb13u1_all-buildd.buildinfo 071ce905aa9e0dc8efed4d4c0999c8986fa322ef 178784 python3-gnocchi_4.6.5-1+deb13u1_all.deb Checksums-Sha256: 4e6c4df1b92cf3fa85c245ccf00416dd97548e6a89b785370a7939bdd7324ed8 25552 gnocchi-api_4.6.5-1+deb13u1_all.deb 3e74c4d2d8212aaf2330060a9c2ba315fc0df2c4d99f2739b87f2021a3267dad 30456 gnocchi-common_4.6.5-1+deb13u1_all.deb 8d04700d60f7d0ab07c6077bf41a6207b5c8b3b4bd3e9b51fb9930af03f5e6a1 7376 gnocchi-metricd_4.6.5-1+deb13u1_all.deb b55d0801b9acb49ca2b0b8c614edcd31e89b6fce71e78979ffee5aa2282a87ad 7368 gnocchi-statsd_4.6.5-1+deb13u1_all.deb e3aedec992d1e4fe91499925c2652b132d40652d00194ba4522e62070c8c2ba0 18275 gnocchi_4.6.5-1+deb13u1_all-buildd.buildinfo 417cb0586938b8c63bdc1616bf0a4c88739898070d33753200eeb399f34535bc 178784 python3-gnocchi_4.6.5-1+deb13u1_all.deb Files: 37b213f163da1a3dbbb6589a104a589e 25552 net optional gnocchi-api_4.6.5-1+deb13u1_all.deb 4e548e00d87c7a21625ac88a1ee04e9a 30456 net optional gnocchi-common_4.6.5-1+deb13u1_all.deb 129e8ff4e9f87d7392c35a6e6a51f440 7376 net optional gnocchi-metricd_4.6.5-1+deb13u1_all.deb 10e5ffe654cc0fdd2c128ab47f48b2ec 7368 net optional gnocchi-statsd_4.6.5-1+deb13u1_all.deb 71cd69c8330fc10bfa40e9a0d4b76683 18275 net optional gnocchi_4.6.5-1+deb13u1_all-buildd.buildinfo 9db1f945eac9edcdff0fcbcd7b2d14d0 178784 python optional python3-gnocchi_4.6.5-1+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmr3ax0ACgkQaBVi67oX tfmcFQ//bswr6V+x/J+GZPNGAHHo1DdgGViktlOyBEUl5YKePnLcIWRy6NxQS1kY gugtbl5P9AkPdB2iaDT2VQtPbVfnGRJqp5Af4G9M0vvSv15EvjOkZX7DxiXaKs4K s09LPaeheQkH2QZ/ffauSGe77gac7HZrZU2yAgsIEAyVSEADujdrX9LfnDrApXir M66amPuVP66OP0EKqzpjeFdzrZi5qNm1sJgNo6BxvcYa7HjXZzhboBiltx7k7ckB OUJSyWGrijTkmYeRZuKUl8uQPi85QS3O89pk+lH+0lhv1pi+pbMqKxkDyU0ldBZT VE8wMzYz3kh6gfWIbjV7Da4E+2MTN0hTAHfzDCwsAey3Be/qBurlRhQa0c7GtYzl xsO9IC1SFNUfERZksnLh1UnX25aiVku+2HAOsQIOItPteqMMELOkF8SMaG5mAY1x OdreS3QZrOJg4wqiu1T0UGi8eQn6R3MogeusYmNEtp1FJIDxE7Uu7NM5xrV5Fdrd GuQkl+Mrqx2AvFUBFwT5EjpRaDBEPzQMjHBLRd9b+y9qaTkTYH7FFRZMlTW5GXE2 haJIheoqkk/tQMQ8elh5MTEKAjRBz/+QeUyRBaVHmRIxTa3kY2TqVbU+GTX0Tgmt 7TixJ9PjRzi2iFJ2yWuyqhdwJ1QUJxlxkZ8cbls7E49r2gqN9E8= =51H4 -----END PGP SIGNATURE-----