[ubuntu/resolute-security] aodh 1:22.0.0-0ubuntu1.1 (Accepted)
Kyle Kernick
kyle.kernick at canonical.com
Mon Oct 5 15:29:22 UTC 2026
aodh (1:22.0.0-0ubuntu1.1) resolute-security; urgency=medium
* SECURITY UPDATE: project scope bypass in alarm listing API
- debian/patches/CVE-2026-76878.patch: fix all_projects=false bypass of
project scope in aodh/api/controllers/v2/alarms.py and add tests in
aodh/tests/functional/api/v2/test_alarm_scenarios.py.
- CVE-2026-76878
Date: 2026-10-01 19:32:43.181628+00:00
Changed-By: Charles Cochran <charles.cochran at canonical.com>
Signed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/aodh/1:22.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Resolute-changes
mailing list