-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 05 Nov 2026 12:40:16 +0100
Source: aodh
Binary: aodh-api aodh-common aodh-doc aodh-evaluator aodh-expirer aodh-listener aodh-notifier python3-aodh
Architecture: all
Version: 20.0.0-2+deb13u2
Distribution: trixie
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
 aodh-api   - OpenStack Telemetry (Ceilometer) Alarming - API server
 aodh-common - OpenStack Telemetry (Ceilometer) Alarming - common files
 aodh-doc   - OpenStack Telemetry (Ceilometer) Alarming - doc
 aodh-evaluator - OpenStack Telemetry (Ceilometer) Alarming - alarm evaluator
 aodh-expirer - OpenStack Telemetry (Ceilometer) Alarming - expirer
 aodh-listener - OpenStack Telemetry (Ceilometer) Alarming - listener
 aodh-notifier - OpenStack Telemetry (Ceilometer) Alarming - alarm notifier
 python3-aodh - OpenStack Telemetry (Ceilometer) Alarming - Python libraries
Closes: 1153094
Changes:
 aodh (20.0.0-2+deb13u2) trixie; urgency=high
 .
   * lp-2167496: Fix an authorization bypass in the alarm listing API where
     duplicated project_id query filters could bypass project scope:
     authorization validated the first filter value while the storage query
     kept the last one, letting a non-admin user list another project's
     alarms, including action URLs. Applied upstream patch: "Duplicated
     query fields are now rejected with a 400 response" (Closes: #1153094):
     - lp-2167496_Fix_duplicate_project_id_query_filter_bypass_project....patch
Checksums-Sha1:
 57ff5aee104a61a3624c15eba2d0f6749a291016 26020 aodh-api_20.0.0-2+deb13u2_all.deb
 c9c5f1467319ec27358a527fd09d853345e3e78f 41136 aodh-common_20.0.0-2+deb13u2_all.deb
 84cde2a1606d79686be953d90c46cdcf888debe7 1007444 aodh-doc_20.0.0-2+deb13u2_all.deb
 d6d0f22edbdc9a22a82fd2fd70d3eef2d38d21f0 7948 aodh-evaluator_20.0.0-2+deb13u2_all.deb
 4651330eb2e9c886c5db3140d48959c0b9c8c330 8012 aodh-expirer_20.0.0-2+deb13u2_all.deb
 f1e5bd784bddc77e288519e8573c9e1e2bd86d35 7968 aodh-listener_20.0.0-2+deb13u2_all.deb
 bd2b36163335411264469fb7f964a4976b060ba3 7952 aodh-notifier_20.0.0-2+deb13u2_all.deb
 a9d1da89c84037478ec30e47168edd54fa902f8b 18382 aodh_20.0.0-2+deb13u2_all-buildd.buildinfo
 ebd45e7025fc40a534572171989311d81cb6d4d7 96848 python3-aodh_20.0.0-2+deb13u2_all.deb
Checksums-Sha256:
 6524e2ae3cb87f59e5c31a676734f19f2256f6bd90ecd4a982a9952fed79b007 26020 aodh-api_20.0.0-2+deb13u2_all.deb
 96d19f34735c9063cdbd0f8890be231ee87f1dd16e1e91f3295121b008c6005e 41136 aodh-common_20.0.0-2+deb13u2_all.deb
 69333db31d35b17c7ca370abf8cc074db5b77d95b59a72e13ac70ee305b8de94 1007444 aodh-doc_20.0.0-2+deb13u2_all.deb
 f2deb9b80ee08222869ff917a24647c99d672bc05405bb889284692f5ff8bb99 7948 aodh-evaluator_20.0.0-2+deb13u2_all.deb
 756d82d1eb7c4042dc2658084ee1556792b24839472d363a9ca343314c58d2da 8012 aodh-expirer_20.0.0-2+deb13u2_all.deb
 6a09a55a8451e1c373f600705ecf1196155dbe47c3f095c5af71875b91796eb0 7968 aodh-listener_20.0.0-2+deb13u2_all.deb
 60b86b8ff8d9209ad020c1d3f4be894a8877675dcc4bed4cebc3b935af1826b6 7952 aodh-notifier_20.0.0-2+deb13u2_all.deb
 a6605e3c83c4a6dba2d04635ccfda55f7701273434a24aab9655b64d9874da68 18382 aodh_20.0.0-2+deb13u2_all-buildd.buildinfo
 5891a8349a2cf6f49d0479b95253cb7d70de691025899205e70e3160a04151c4 96848 python3-aodh_20.0.0-2+deb13u2_all.deb
Files:
 d9ab3323b6ae0d7419051ad3b23169ae 26020 web optional aodh-api_20.0.0-2+deb13u2_all.deb
 e45cee235460c100f895339eb6fd6bf7 41136 web optional aodh-common_20.0.0-2+deb13u2_all.deb
 be50dd95c11f9364ca1e77a592ee6c80 1007444 doc optional aodh-doc_20.0.0-2+deb13u2_all.deb
 ed4603aac411ae0fc6a0727cfb907057 7948 web optional aodh-evaluator_20.0.0-2+deb13u2_all.deb
 e67b4f1086744b224e201e4298e2d312 8012 web optional aodh-expirer_20.0.0-2+deb13u2_all.deb
 90d41724da0b426d084a63c8b7ddfa8d 7968 web optional aodh-listener_20.0.0-2+deb13u2_all.deb
 9ac9d1233116f3f36c1c1ccca7424e11 7952 web optional aodh-notifier_20.0.0-2+deb13u2_all.deb
 8fab8b626cb962497e3f3d81c1d70940 18382 web optional aodh_20.0.0-2+deb13u2_all-buildd.buildinfo
 f849d0a280c655ebbc930fa291714a0a 96848 python optional python3-aodh_20.0.0-2+deb13u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=U+/4
-----END PGP SIGNATURE-----