Ubuntu alert USN-8860-1 (designate)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8860-1] OpenStack Designate vulnerability
Date:
             
 
Thu, 01 Oct 2026 12:13:45 +0000
Message-ID:
             
 
<E1xCFfV-000799-7D@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8860-1
October 01, 2026

designate vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

OpenStack Designate could allow DNS traffic to be redirected or disrupted.

Software Description:
- designate: OpenStack DNS as a Service

Details:

It was discovered that OpenStack Designate did not properly validate
overlapping zones under certain circumstances. An authenticated user could
possibly use this issue to redirect DNS traffic to attacker-controlled
systems or cause a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  designate                       1:22.0.0-0ubuntu2.1
  python3-designate               1:22.0.0-0ubuntu2.1

Ubuntu 24.04 LTS
  designate                       1:18.0.0-0ubuntu1.1
  python3-designate               1:18.0.0-0ubuntu1.1

Ubuntu 22.04 LTS
  designate                       1:14.0.4-0ubuntu1.1
  python3-designate               1:14.0.4-0ubuntu1.1

Ubuntu 20.04 LTS
  designate                       1:10.0.2-0ubuntu1+esm1
                                  Available with Ubuntu Pro
  python3-designate               1:10.0.2-0ubuntu1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  designate                       1:6.0.1-0ubuntu1.2+esm1
                                  Available with Ubuntu Pro
  python-designate                1:6.0.1-0ubuntu1.2+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  designate                       1:2.1.0-0ubuntu1+esm1
                                  Available with Ubuntu Pro
  python-designate                1:2.1.0-0ubuntu1+esm1
                                  Available with Ubuntu Pro

After a standard system update you need to restart OpenStack Designate to
make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8860-1
  CVE-2026-71193

Package Information:
  https://launchpad.net/ubuntu/+source/designate/1:22.0.0-0...
  https://launchpad.net/ubuntu/+source/designate/1:18.0.0-0...
  https://launchpad.net/ubuntu/+source/designate/1:14.0.4-0...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmq+TlAACgkQcpJm3tlz
hgFwZxAAs4g8i8AmPUJis3EjAy4YjdNAcl6n+ovv9uCyxra7rdM87bzTbZJVzKSG
cPPlxqR2cjdUHD5gnjyQoENaaZLKPLy7umJZ6+Xsm5krkkyRwPxrwS6Tom9dALsP
WUKkbhsLa678As2qQvmn7dP2I0Q+c+gIoyEY/tSd6W33u2VLG1VeMaFstI26uE38
B8cIPM3lFiJEB4EYAY+jLQoWfRRl5qSdPD7+LiJiS/WGzLD2khlCsJS4O4DnBSHp
YTSJBA+5KqPtmMZ7LRyi5mTqSm7+UQTMzpEzgt9zfenStCg97k/TsE83WMPfJMpV
iulNuEn218a6NcCt2umeWeXUnpPcBGQdPfUhimHIv+xMs0WRK69vHAfGdMUJv9/9
SPtwuVbnGFk68745Kz3f9jRRxMP/Q9Hh0c4naoPEpl6kptzoGKLYImXKLm5DAmeG
CCGqZCbyMX2h2fpSII3u/um6B7FoYdCRPDXx1UxtyMF7lUBoEfmeUOlusXs09ore
ZUGDjfjk/cMh6rAu+PkZCAZBhnv5VAAfiBg2ZJvYcSgiT8u2FwLqaOFv32YZu6Sl
bdOZXHeDMt9vTPtw2enuL/3d0U6Sjg8dgcR2GFn5QNjuSGvnIQiUbn7s2ljQLZPY
9c/yoeZQZZvKBveC7UWHo3ZKOKhfapL/j6B/Oxvs3zAwJoCIuRQ=
=NOck
-----END PGP SIGNATURE-----