Hi,

[ Reason ]
I'd like to upload Glance u3 to Trixie to address:
https://wiki.openstack.org/wiki/OSSN/OSSN-0105
aka:
https://bugs.debian.org/1144212

The security team asked me to go through p-u.

[ Impact ]
As per upstream announce, Glance is otherwise affected by
"legacy Tasks import bypasses image import URI"

[ Tests ]
The patch includes new tests, ran at package build time.

[ Risks ]
Not much, the patch is small (if excluding tests).

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

Please allow me to upload glance/2:30.0.0-3+deb13u3 to
trixie-pu.

Cheers,

Thomas Goirand (zigo)

Control: tags -1 + confirmed

There appears to have been a CVE assigned, so it would be worth
mentioning that in the changelog.

Please go ahead.

Regards,

Adam

CVE-2026-71196, CVE-2026-71197, CVE-2026-71198

aka: #1146594

This was uploaded, thanks.

Thomas Goirand (zigo)