UbuntuUpdates.org

Package "designate"

Name: designate

Description:

OpenStack DNS as a Service - metapackage
Latest version: 1:18.0.0-0ubuntu1.1
Release: noble (24.04)
Level: updates
Repository: main
Homepage: https://opendev.org/openstack/designate

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "designate"

All arch deb package
APT INSTALL

Other versions of "designate" in Noble

Repository Area Version
base main 1:18.0.0-0ubuntu1
security main 1:18.0.0-0ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:18.0.0-0ubuntu1.1 2026-10-01 17:07:32 UTC

designate (1:18.0.0-0ubuntu1.1) noble-security; urgency=medium

  * SECURITY UPDATE: DNS hijack and denial of service
    - debian/patches/CVE-2026-71193.patch: Fix cross-tenant/cross-pool zone
      ownership bypass in designate/central/service.py,
      designate/tests/functional/central/test_basic.py,
      designate/tests/functional/central/test_service.py.
    - CVE-2026-71193

 -- John Breton Wed, 30 Sep 2026 14:22:34 -0400
CVE-2026-71193 In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the targe


About   -   Send Feedback to @ubuntu_updates