UbuntuUpdates.org

Package "designate"

Name: designate

Description:

OpenStack DNS as a Service - metapackage
Latest version: 1:14.0.4-0ubuntu1.1
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://github.com/openstack/designate

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "designate"

All arch deb package
APT INSTALL

Other versions of "designate" in Jammy

Repository Area Version
base main 1:14.0.0-0ubuntu1
updates main 1:14.0.4-0ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:14.0.4-0ubuntu1.1 2026-10-01 13:07:37 UTC

designate (1:14.0.4-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: DNS hijack and denial of service
    - debian/patches/CVE-2026-71193.patch: Fix cross-tenant/cross-pool zone
      ownership bypass in designate/central/service.py,
      designate/tests/unit/test_central/test_basic.py,
      designate/tests/test_central/test_service.py.
    - CVE-2026-71193

 -- John Breton Wed, 30 Sep 2026 14:23:28 -0400
CVE-2026-71193 In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the targe


About   -   Send Feedback to @ubuntu_updates