glance (2:28.1.0-0ubuntu1.2) noble-security; urgency=medium

  * d/p/fix-test-no-network.patch: patch calls to socket.getaddrinfo 

 -- Federico Quattrin <federico.quattrin@canonical.com>  Wed, 18 Mar 2026 22:38:33 -0300

glance (2:28.1.0-0ubuntu1.1) noble-security; urgency=medium

  * SECURITY UPDATE: Server-Side Request Forgery (LP: 2138602)
    - d/p/bug-2138602-stable-2024.1-caracal.patch: fix ssrf vulnerability

 -- Guillaume Boutry <guillaume.boutry@canonical.com>  Wed, 18 Mar 2026 17:02:19 +0100

glance (2:28.1.0-0ubuntu1) noble; urgency=medium

  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    caracal.
  * d/gbp.conf: Set upstream branch to upstream-caracal.
  * New upstream release for OpenStack Caracal (LP: #2097425):
    - d/p/CVE-2024-32498*.patch: Drop, included in release.

 -- James Page <james.page@ubuntu.com>  Wed, 05 Feb 2025 09:49:29 +0000

glance (2:28.0.1-0ubuntu1.2) noble-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access via custom QCOW2 external data
    (LP: #2059809)
    - debian/patches/CVE-2024-32498-1.patch: reject qcow files with
      data-file attributes.
    - debian/patches/CVE-2024-32498-2.patch: extend format_inspector for
      QCOW safety.
    - debian/patches/CVE-2024-32498-3.patch: add VMDK safety check.
    - debian/patches/CVE-2024-32498-4.patch: reject unsafe qcow and vmdk
      files.
    - debian/patches/CVE-2024-32498-5.patch: add QED format detection to
      format_inspector.
    - debian/patches/CVE-2024-32498-6.patch: add file format detection to
      format_inspector.
    - debian/patches/CVE-2024-32498-7.patch: add safety check and detection
      support to FI tool.
    - CVE-2024-32498

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 28 Jun 2024 16:43:09 -0400

glance (2:28.0.1-0ubuntu1) noble; urgency=medium

  * New upstream release for OpenStack Caracal.

 -- James Page <james.page@ubuntu.com>  Fri, 05 Apr 2024 16:55:04 +0100

glance (2:28.0.0~rc1-0ubuntu1) noble; urgency=medium

  [ James Page ]
  * d/watch: Track Caracal series releases.

  [ Jadon Naas ]
  * New upstream release candidate for OpenStack Caracal.

 -- Jadon Naas <jadon.naas@canonical.com>  Fri, 22 Mar 2024 07:58:23 +0000

glance (2:28.0.0~b2+git2024011916.f429b53e-0ubuntu1) noble; urgency=medium

  [ Corey Bryant ]
  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    caracal.

  [ James Page ]
  * New upstream snapshot for OpenStack Caracal.
  * d/control: Align (Build-)Depends with upstream.
  * d/control: Drop ancient Python-Version field.

 -- James Page <james.page@ubuntu.com>  Mon, 22 Jan 2024 13:58:03 +0000

glance (2:27.0.0-0ubuntu1) mantic; urgency=medium

  * New upstream release for OpenStack Bobcat.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 04 Oct 2023 08:53:22 -0400

glance (2:27.0.0~b2+git2023090714.b059c898-0ubuntu1) mantic; urgency=medium

  * New upstream snapshot for OpenStack Bobcat.
  * d/p/install-missing-db-files.patch: Install missing db files, including
    glance/db/sqlalchemy/alembic_migrations/alembic.ini.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 07 Sep 2023 14:17:28 -0400

glance (2:27.0.0~b1+git2023071214.b350184f-0ubuntu1) mantic; urgency=medium

  * New upstream snapshot for OpenStack Bobcat.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 12 Jul 2023 14:08:48 -0400

glance (2:27.0.0~b1+git2023061414.43b2116a-0ubuntu1) mantic; urgency=medium

  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    bobcat.
  * New upstream snapshot for OpenStack Bobcat.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 14 Jun 2023 14:59:29 -0400

glance (2:26.0.0-0ubuntu1) lunar; urgency=medium

  * New upstream release for OpenStack Antelope.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 23 Mar 2023 14:28:57 -0400

glance (2:26.0.0~b3+git2023030211.f0371614-0ubuntu2) lunar; urgency=medium

  * d/t/glance-daemons: Bump sleep to 0.5

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 06 Mar 2023 08:36:18 -0500

glance (2:26.0.0~b3+git2023030211.f0371614-0ubuntu1) lunar; urgency=medium

  * d/watch: Drop major version.
  * New upstream snapshot for OpenStack Antelope.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/add-root-tar-support.patch: Rebased.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 02 Mar 2023 11:47:40 -0500

glance (2:26.0.0~b2+git2023012815.907c5626-0ubuntu1) lunar; urgency=medium

  * New upstream snapshot for OpenStack Antelope.

 -- Corey Bryant <corey.bryant@canonical.com>  Sat, 28 Jan 2023 15:45:31 -0500

glance (2:26.0.0~b2+git2023011009.e9b40e13-0ubuntu1) lunar; urgency=medium

  * New upstream snapshot for OpenStack Antelope.

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 10 Jan 2023 09:43:49 -0500

glance (2:25.0.0-0ubuntu1) kinetic; urgency=medium

  * d/watch: Scope to 25.x.
  * New upstream release for OpenStack Zed.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 05 Oct 2022 14:33:02 -0400

glance (2:25.0.0~b3+git2022091212.d7db4e562-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 12 Sep 2022 12:42:51 -0400

glance (2:24.1.0+git2022071413.8140abe63-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.
  * d/control: Ensure openstack-pkg-tools has CIS hardening for log files
    and pkgos_adduser.
  * d/glance-common.postinst: CIS hardening update to switch adduser to use
    /usr/sbin/nologin when creating system account that does not run a shell.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 14 Jul 2022 13:44:15 -0400

glance (2:24.1.0+git2022070708.be9da314e-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 07 Jul 2022 08:47:28 -0400

glance (2:24.0.0+git2022060209.6bd1d14a5-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.
  * d/control: Update standards version to 4.6.1.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 02 Jun 2022 09:10:12 -0400

glance (2:24.0.0-0ubuntu1) jammy; urgency=medium

  * d/watch: Scope to 24.x.
  * New upstream release for OpenStack Yoga.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 30 Mar 2022 16:36:07 -0400

glance (2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/skip-py10-failure.patch: Dropped. Fixed in upstream snapshot.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 03 Mar 2022 11:12:09 -0500

glance (2:23.0.0+git2022011216.502fa0ffc-0ubuntu1) jammy; urgency=medium

  * d/glance-common.install, d/glance-api.init.in: Install
    glance-image-import.conf.sample and add --config-dir=/etc/glance/
    to glance-api init script (LP: #1955022).
  * New upstream snapshot for OpenStack Yoga.
  * d/control, d/rules: Bump debhelper compat to 13.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 12 Jan 2022 16:47:24 -0500

glance (2:23.0.0+git2021120811.4ee7799aa-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/p/skip-py10-failure.patch: Skip test that is raising different
    exception with Python 3.10.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 08 Dec 2021 11:37:41 -0500

glance (2:23.0.0-0ubuntu1) impish; urgency=medium

  * d/watch: Scope to 23.x.
  * New upstream release for OpenStack Xena.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Wed, 06 Oct 2021 15:13:30 +0000

glance (2:23.0.0~b3+git2021091316.d49eaa04c-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.
  * d/p/add-root-tar-support.patch: Rebased.

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 13 Sep 2021 16:23:37 -0400

glance (2:23.0.0~b2+git2021072116.62334aa4-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 21 Jul 2021 16:40:48 -0400

glance (2:22.0.0+git2021061112.4f20e500-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Fri, 11 Jun 2021 12:51:22 +0000

glance (2:22.0.0-0ubuntu1) hirsute; urgency=medium

  * New upstream release for OpenStack Wallaby.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 14 Apr 2021 15:02:38 -0400

glance (2:22.0.0~rc1-0ubuntu1) hirsute; urgency=medium

  * d/watch: Track the 22.x series and fix path.
  * New upstream release candidate for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 23 Mar 2021 17:10:24 -0400

glance (2:22.0.0~b2+git2021012915.03bf00ee-0ubuntu1) hirsute; urgency=medium

  * New upstream snapshot for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 29 Jan 2021 15:31:36 -0500

glance (2:21.0.0+git2020120911.f102b74a-0ubuntu1) hirsute; urgency=medium

  * New upstream snapshot for OpenStack Wallaby.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 09 Dec 2020 11:52:03 -0500

glance (2:21.0.0-0ubuntu1) groovy; urgency=medium

  * d/control: Update VCS paths for move to lp:~ubuntu-openstack-dev.
  * d/watch: Track the 21.x series.
  * New upstream release for OpenStack Victoria.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Thu, 15 Oct 2020 10:14:02 +0000

glance (2:21.0.0~b3~git2020091515.e16d5c9b-0ubuntu1) groovy; urgency=medium

  [ Chris MacNaughton ]
  * d/control: Remove Breaks/Replaces that are older than Focal (LP: #1878419).

  [ Corey Bryant ]
  * New upstream snapshot for OpenStack Victoria.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 15 Sep 2020 15:56:58 -0400

glance (2:21.0.0~b2~git2020073013.cfbe5f76-0ubuntu2) groovy; urgency=medium

  * d/glance-common.postrm: Drop --system from deluser/delgroup calls. This
    aligns with the glance-common.postinst script reserved glance uid/gid
    (LP: #1889846).

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 03 Aug 2020 12:39:41 -0400

glance (2:21.0.0~b2~git2020073013.cfbe5f76-0ubuntu1) groovy; urgency=medium

  * New upstream snapshot for OpenStack Victoria.
  * Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@canonical.com>  Thu, 30 Jul 2020 13:19:26 +0000

glance (2:21.0.0~b1~git2020062909.e6db0b10-0ubuntu1) groovy; urgency=medium

  * New upstream snapshot for OpenStack Victoria.
  * Align (Build-)Depends with upstream.
  * d/glance-common.install, d/glance-common.manpages: Remove glance-registry bits
    after upstream removal.
  * d/control: Update Standards-Version to 4.5.0.

 -- Chris MacNaughton <chris.macnaughton@canonical.com>  Mon, 29 Jun 2020 09:45:58 +0000

glance (2:20.0.0-0ubuntu1) groovy; urgency=medium

  * d/watch: Scope to 20.x series.
  * New upstream release for OpenStack Ussuri (LP: #1877642).

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 13 May 2020 13:55:45 -0400

glance (2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/glance-common.postinst: Set ownership and permissions for all /var/lib
    files and directories.
  * d/p/monkey-patch-original-current-thread-active.patch: Dropped. Fixed
    in snapshot.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 10 Apr 2020 12:58:27 -0400

glance (2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu3) focal; urgency=medium

  * d/watch: Update tarball URL to opendev.org.
  * d/glance-common.dirs: Ensure /etc/glance/rootrap.d is created
    (LP: #1871889).

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 06 Apr 2020 12:19:07 -0400

glance (2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2) focal; urgency=medium

  * d/tests/test-shebang.py: Dropped. No longer used.
  * d/p/monkey-patch-original-current-thread-active.patch: Cherry-picked from
    https://review.opendev.org/#/c/716058/. This fixes glance service failures
    that autopkgtests are hitting with Python 3.8 (LP: #1863021).

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 30 Mar 2020 14:41:49 -0400

glance (2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/glance-common.install: Drop install of policy.json inline with upstream
    removal.
  * d/glance-common.postinst: Set default ownership and permissions for
    /etc/<pkg>, /var/lib/<pkg>, and /var/log/<pkg> (LP: #1859422).

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 24 Mar 2020 14:49:34 -0400

glance (2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/control: Align (Build-)Depends with upstream.

 -- Sahid Orentino Ferdjaoui <sahid.ferdjaoui@canonical.com>  Wed, 05 Feb 2020 10:02:14 +0100

glance (2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/control: Drop. Dropped Python2 support
  * d/rules: Swith to pybuild
  * d/rules: Update PBR_VERSION to handle ~git versioning.

 -- Sahid Orentino Ferdjaoui <sahid.ferdjaoui@canonical.com>  Mon, 16 Dec 2019 11:50:39 +0100

glance (2:19.0.0-0ubuntu1) eoan; urgency=medium

  * New upstream release for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 16 Oct 2019 10:56:35 -0400

glance (2:19.0.0~rc1-0ubuntu2) eoan; urgency=medium

  * d/tests/control,glance-daemons: Update to use MySQL for autopkgtests
    ensuring coverage for MySQL 8 changes in sqlalchemy (LP: #1846548).
  * d/control: Bump minimum version of sqlalchemy to ensure compatibility
    with MySQL 8.

 -- James Page <james.page@ubuntu.com>  Fri, 04 Oct 2019 10:40:04 +0100

glance (2:19.0.0~rc1-0ubuntu1) eoan; urgency=medium

  * d/watch: Scope to 19.x series.
  * d/p/drop-sphinxcontrib-apidoc.patch: Dropped. No longer needed.
  * New upstream release candidate for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/add-root-tar-support.patch: Rebased.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 02 Oct 2019 09:28:58 -0400

glance (2:19.0.0~b2~git2019073017.733095a8-0ubuntu1) eoan; urgency=medium

  * New upstream snapshot for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

 -- Sahid Orentino Ferdjaoui <sahid.ferdjaoui@canonical.com>  Tue, 30 Jul 2019 17:48:19 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-glance-doc`.
