[ubuntu/resolute-security] mistral 22.0.0-0ubuntu1.1 (Accepted)

[Federico Quattrin]

mistral (22.0.0-0ubuntu1.1) resolute-security; urgency=high

  [ Myles Penner ]
  * d/gbp.conf: Create stable/2026.1 branch.

  [ Hemanth Nakkina ]
  * SECURITY UPDATE: unauthorized resource publication via overly permissive
    publicize policies in workflows, actions, event triggers, code sources,
    dynamic actions, workbooks, cron triggers, and environments.
    - d/p/cve-2026-41283-restrict-publicize-policies-admin-only.patch:
      restrict publicize policies to admin_only for workflows, actions and
      event triggers; add missing enforcement on event trigger update.
    - d/p/cve-2026-41283-remove-expect-errors-policy-tests.patch:
      clean up unnecessary expect_errors=True in policy tests.
    - d/p/cve-2026-41283-add-code-sources-publicize-policy.patch:
      add code_sources:publicize policy (admin_only) and enforce on
      create/update.
    - d/p/cve-2026-41283-restrict-code-sources-dynamic-actions.patch:
      restrict code_sources and dynamic_actions operations to admin_only.
    - d/p/cve-2026-41283-add-dynamic-actions-publicize-policy.patch:
      add dynamic_actions:publicize policy (admin_only) and enforce on
      create/update.
    - d/p/cve-2026-41283-add-workbooks-publicize-policy.patch:
      add workbooks:publicize policy (admin_only) and enforce on
      create/update.
    - d/p/cve-2026-41283-add-cron-triggers-publicize-policy.patch:
      add cron_triggers:publicize policy (admin_only) and enforce on create.
    - d/p/cve-2026-41283-add-environments-publicize-policy.patch:
      add environments:publicize policy (admin_only) and enforce on
      create/update.
    - CVE-2026-41283

Date: 2026-06-09 14:53:10.186446+00:00
Changed-By: Hemanth Nakkina <hemanth.nakkina at canonical.com>
Signed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/mistral/22.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.