Debian/designate: critical 9.6
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these
Action: Upgrade designate to 1:15.0.2-0+deb11u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:15.0.2-0+deb11u1 | - |
Fixed versions
| 1:15.0.2-0+deb11u1 |
Sources
published · modified · JSON