[ubuntu/resolute-updates] aodh 1:22.0.0-0ubuntu1.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Mon Oct 5 19:04:18 UTC 2026
aodh (1:22.0.0-0ubuntu1.1) resolute-security; urgency=medium
* SECURITY UPDATE: project scope bypass in alarm listing API
- debian/patches/CVE-2026-76878.patch: fix all_projects=false bypass of
project scope in aodh/api/controllers/v2/alarms.py and add tests in
aodh/tests/functional/api/v2/test_alarm_scenarios.py.
- CVE-2026-76878
Date: 2026-10-01 19:32:43.181628+00:00
Changed-By: Charles Cochran <charles.cochran at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/aodh/1:22.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Resolute-changes
mailing list