Debian/designate: critical 9.6
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these
Action: Upgrade designate to 1:20.0.0-2+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:20.0.0-2+deb13u1 | - |
Fixed versions
| 1:20.0.0-2+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-71193#Debian:13/designate
- https://security-tracker.debian.org/tracker/CVE-2026-71193
published · modified · JSON