Debian/designate: critical 9.6
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these
Action: Upgrade designate to 1:22.0.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:22.0.0-2 | - |
Fixed versions
| 1:22.0.0-2 |
Sources
- osv: DEBIAN-CVE-2026-71193#Debian:14/designate
- https://security-tracker.debian.org/tracker/CVE-2026-71193
published · modified · JSON