Debian Patches

Status for manila/1:23.0.0-4

Patch Description Author Forwarded Bugs Origin Last update
Fix-evaluator-for-pyparsing-3.3.3.patch Restrict evaluator fn operator to actually implemented functions pyparsing 3.3.3 replaced the recursive implementation of infixNotation
with a shunting-yard parser, in which unary operators with
OpAssoc.RIGHT are now treated as generic prefix operators. The
evaluator grammar defined fn = Word(alphas + '_' + '.') as such an
operator to implement function calls, which now makes pyparsing
capture any bare identifier as a function applied to the rest of the
expression: dotted variable references such as stats.free_capacity_gb
or capabilities.foo, as well as the NOT keyword, can no longer be
substituted, breaking the DriverFilter, GoodnessWeigher and
CapacityWeigher, and failing 11 unit tests at build time.
.
Restrict the fn operator to the only functions that the evaluator
implements (abs, max, min): any other name was already failing with a
KeyError at evaluation time, so this only affects the error path.
The parser now behaves identically with pyparsing 3.0.9, 3.1.2 and
3.3.3.

===================================================================		 yes debian 2026-10-11
install-missing-files.patch Install missing files Thomas Goirand <zigo@debian.org> not-needed 2016-03-25
CVE-2026-71195_Fix_policy_control_for_public_shares.patch Fix policy control for public shares A public share is visible to all tenants, but users other than the owner
should not be able to modify it: several operations skipped the ownership
policy check for public shares. Enforce ownership checks when manipulating
access rules, creating backups or replicas, and soft deleting or restoring
public shares. Export location metadata operations are now scoped to the
share in the request URL; export locations that do not belong to that
share now return 404 (CVE-2026-71195).

diff --git a/manila/api/v2/metadata.py b/manila/api/v2/metadata.py
index 174be168b..ad07ec4f1 100644		 Carlos da Silva <ces.eduardo98@gmail.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/manila/+/1011479 2026-10-20

All known versions for source package 'manila'

Links