[ubuntu/resolute-security] aodh 1:22.0.0-0ubuntu1.1 (Accepted)

Kyle Kernick kyle.kernick at canonical.com
Mon Oct 5 15:29:22 UTC 2026


aodh (1:22.0.0-0ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: project scope bypass in alarm listing API
    - debian/patches/CVE-2026-76878.patch: fix all_projects=false bypass of
      project scope in aodh/api/controllers/v2/alarms.py and add tests in
      aodh/tests/functional/api/v2/test_alarm_scenarios.py.
    - CVE-2026-76878

Date: 2026-10-01 19:32:43.181628+00:00
Changed-By: Charles Cochran <charles.cochran at canonical.com>
Signed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/aodh/1:22.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Resolute-changes mailing list