-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 05 Jun 2026 11:00:14 +0200
Source: neutron
Architecture: source
Version: 2:26.0.3-0+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1135272 1138844
Changes:
 neutron (2:26.0.3-0+deb13u2) trixie-security; urgency=medium
 .
   * New upstream point release.
   * Removed patches applied upstream:
     - Add_state_reporting_back_to_metadata_agents.patch
     - Fix_LoopingCallBase_argument_issue.patch
   * Add start-time=%t in neutron-api-uwsgi.ini.
   * Add haproxy as runtime depends of neutron-ovn-agent. Thanks to Sakirnth
     Nagarasa for the report (Closes: #1135272).
   * CVE-2026-50266 / OSSA-2026-021: Neutron port RBAC policy bypass allows
     project managers to set trusted device owners on shared networks. Added
     upstream patch: Fix port RBAC policies to require network ownership
     (Closes: #1138844).
Checksums-Sha1:
 07942b56d312f39f43dc72b334042f0f6bcdd3b4 5086 neutron_26.0.3-0+deb13u2.dsc
 153a29dc30b55187ea6bb052e94cb48d012dc500 10241136 neutron_26.0.3.orig.tar.xz
 053543953d67b6774104fa0a98496994369ceea0 47164 neutron_26.0.3-0+deb13u2.debian.tar.xz
 406b88ce61cdaca46373745f1a008a848202e1d4 23146 neutron_26.0.3-0+deb13u2_amd64.buildinfo
Checksums-Sha256:
 dec5eea268039fd604d47036d14cb84f8014d26ff71a29503791679b296a9ad2 5086 neutron_26.0.3-0+deb13u2.dsc
 611e8b2e2aab1f6585bd426bcb91b94c3f88215d2913aa1158f6a604d448c1be 10241136 neutron_26.0.3.orig.tar.xz
 767089c90a06b06b2fa22b32895236a1ef0926343983d8d038d0527e899e2fbb 47164 neutron_26.0.3-0+deb13u2.debian.tar.xz
 7de63a7d206fa1259cd49ad6ac799354c00914c03e7a921891f896408e94c4be 23146 neutron_26.0.3-0+deb13u2_amd64.buildinfo
Files:
 323dfc5e716b4eebb614f0640d771ad0 5086 net optional neutron_26.0.3-0+deb13u2.dsc
 605a4f7f503a30e367b766d6a903f853 10241136 net optional neutron_26.0.3.orig.tar.xz
 7eae47cec7cc4f63ef5664d91ba2eb38 47164 net optional neutron_26.0.3-0+deb13u2.debian.tar.xz
 e2019df24eaff587ca246ab53c7381d9 23146 net optional neutron_26.0.3-0+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmopEbEACgkQ1BatFaxr
Q/5meQ/+O9QVuuLdXXmBYFQskN4YqKTRr8Qlybz5EaIg96ZiIY6tezlPKKn54nW3
xrQ5m0WpG/A/FavCE4CTRZnL19Rnh9z38z4WisCasIOt1XPfRH+9gy06o8kMdVKy
3yCl84riK3kqKamJUwumHhLellyJA6qzqt4BbAgQkQBgWj5liw3AlWYl+iHbZZbg
AqnPcY9houwAocdWS5G/H3VkbTNIN61yi9n7KaKlwJe/vjRjZ21UzdSmkEXX3dqM
+Eh+YIZVFhgpTp4BKuizXH0XVOTYeqABYjmIcm/Xfh71Io4KP5JfLt96u5NbrBGa
7wB5EinCT6facN6ayRWdsIWfOtuwObme7fDS0QDKSwmmT0emmo+R49d+tj9co6o1
23YQwzR7pYqhq0jotw+PbX4PsVPhIRaAnxaRoAsqHNv/L5v3QL8r0D5SPxyBYjFH
4R92IpKOEru0uoSbGr2nD3oqzqZDeI6bltZQLvkWYuZQlp8eBtWCS0vNsVqUXg1M
jYL61ub4LrXxQViOpL1186xWNGDX6FKrGFPLEi8ajuMdppWLxigw48puwIkcLdm9
zkiManztCieWmv356e4+2XTm5zRePk0v6l0h5yS14e54JyfKPrfKaYbzKpxC8eFb
YXSVFolg4WW2ijrD4wP79KGzuZd7RmUXPkprbQzO3PwHMZSnKSM=
=WRUy
-----END PGP SIGNATURE-----