UbuntuUpdates.org

Package "designate-pool-manager"

Name: designate-pool-manager

Description:

OpenStack DNS as a Service - pool manager
Latest version: 1:14.0.4-0ubuntu1.1
Release: jammy (22.04)
Level: security
Repository: main
Head package: designate
Homepage: https://github.com/openstack/designate

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "designate-pool-manager"

All arch deb package
APT INSTALL

Other versions of "designate-pool-manager" in Jammy

Repository Area Version
base main 1:14.0.0-0ubuntu1
updates main 1:14.0.4-0ubuntu1

Changelog

Version: 1:14.0.4-0ubuntu1.1 2026-10-01 13:07:37 UTC

designate (1:14.0.4-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: DNS hijack and denial of service
    - debian/patches/CVE-2026-71193.patch: Fix cross-tenant/cross-pool zone
      ownership bypass in designate/central/service.py,
      designate/tests/unit/test_central/test_basic.py,
      designate/tests/test_central/test_service.py.
    - CVE-2026-71193

 -- John Breton Wed, 30 Sep 2026 14:23:28 -0400
CVE-2026-71193 In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the targe


About   -   Send Feedback to @ubuntu_updates