designate - Debian Package Tracker

general

source: designate (main)
version: 1:23.0.0-2
maintainer: Debian OpenStack (DMD)
uploaders: Thomas Goirand [DMD] – Michal Arbet [DMD]
arch: all
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:11.0.0-2
oldstable: 1:15.0.0-4
old-sec: 1:15.0.2-0+deb11u1
stable: 1:20.0.0-2
stable-sec: 1:20.0.0-2+deb13u1
testing: 1:23.0.0-1
unstable: 1:23.0.0-2

versioned links

1:11.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:15.0.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:15.0.2-0+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:20.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:20.0.0-2+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:23.0.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:23.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

designate
designate-agent
designate-api
designate-central
designate-common
designate-doc
designate-mdns
designate-pool-manager
designate-producer
designate-sink
designate-worker
designate-zone-manager
python3-designate

action needed

Marked for autoremoval on 16 November due to fsspec: #1149800 high

Version 1:23.0.0-1 of designate is marked for autoremoval from testing on Mon 16 Nov 2026. It depends (transitively) on fsspec, affected by #1149800. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-10-07 Last update: 2026-10-12 04:31

2 security issues in bullseye high

There are 2 open security issues in bullseye.

2 important issues:

CVE-2026-71193: In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an overlapping zone that conflicts with another tenant's zone. This enables cross-tenant DNS hijack (redirecting traffic to attacker-controlled IPs) and DNS denial of service (NODATA responses). Exploitation requires a multi-pool deployment with AttributeFilter enabled in scheduler_filters, which is a non-default but documented and supported configuration for self-service tiering.
CVE-2026-71194: In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-tenant zone overlap described in a different recent CVE, and also affects legitimate same-tenant cross-pool configurations. BIND9 views do not mitigate this issue as mDNS is a shared service upstream of any view configuration.

Created: 2026-08-11 Last update: 2026-08-24 05:00

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-10-04 Last update: 2026-10-12 02:01

lintian reports 25 warnings normal

Lintian reports 25 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-09-06 Last update: 2026-10-11 22:31

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit f92f12bfc12741f21c21460818fb2f23f9dad5c3
Author: Thomas Goirand <zigo@debian.org>
Date:   Sun Oct 11 10:14:23 2026 +0200

    Depend on system Font Awesome in -doc package.
    
    The openstackdocstheme 3.2.0-4 based docs load the Font Awesome glyphs from the system files; add fonts-font-awesome-legacy | fonts-font-awesome to the -doc package's runtime depends so the icons render on any system.

commit 19738670de68119e4ab93f4c329f92806b6f052c
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Oct 9 15:01:38 2026 +0200

    Drop stale -doc links (new openstackdocstheme).
    
    The openstackdocstheme 3.2.0-4 based docs no longer ship jquery-3.2.1 and bootstrap.min files; bootstrap 5 css and js are embedded in the built docs and dh_sphinxdoc adds the jQuery symlink and dependency. The old links file pointed bootstrap 3 files at the theme's paths and would now overwrite the correct embedded copy.

Created: 2026-10-11 Last update: 2026-10-11 16:49

2 open merge requests in Salsa normal

There are 2 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-09-30 Last update: 2026-09-30 17:01

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

designate-doc could be marked Multi-Arch: foreign

Created: 2021-01-12 Last update: 2026-10-12 02:02

debian/patches: 3 patches to forward upstream low

Among the 4 debian patches available in version 1:23.0.0-2 of the package, we noticed the following issues:

3 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-10-11 23:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.1.3).

Created: 2018-04-16 Last update: 2026-10-11 16:49

testing migrations

excuses:
- Migration status for designate (1:23.0.0-1 to 1:23.0.0-2): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Autopkgtest for designate/1:23.0.0-2: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Too young, only 1 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/d/designate.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-10-11] Accepted designate 1:23.0.0-2 (source) into unstable (Thomas Goirand)
[2026-10-05] designate 1:23.0.0-1 MIGRATED to testing (Debian testing watch)
[2026-09-30] Accepted designate 1:23.0.0-1 (source) into unstable (Thomas Goirand)
[2026-09-24] designate 1:23.0.0~rc1-2 MIGRATED to testing (Debian testing watch)
[2026-09-20] Accepted designate 1:23.0.0~rc1-2 (source) into unstable (Thomas Goirand)
[2026-09-10] Accepted designate 1:23.0.0~rc1-1 (source) into experimental (Thomas Goirand)
[2026-09-09] designate 1:22.0.1-1 MIGRATED to testing (Debian testing watch)
[2026-09-05] Accepted designate 1:22.0.1-1 (source) into unstable (Thomas Goirand)
[2026-08-24] Accepted designate 1:20.0.0-2+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-08-20] Accepted designate 1:15.0.2-0+deb11u1 (source) into oldstable-security (Thomas Goirand)
[2026-08-19] Accepted designate 1:20.0.0-2+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-08-17] designate 1:22.0.0-2 MIGRATED to testing (Debian testing watch)
[2026-08-12] Accepted designate 1:22.0.0-2 (source) into unstable (Thomas Goirand)
[2026-04-03] designate 1:22.0.0-1 MIGRATED to testing (Debian testing watch)
[2026-04-01] Accepted designate 1:22.0.0-1 (source) into unstable (Thomas Goirand)
[2026-03-31] designate 1:22.0.0~rc1-3 MIGRATED to testing (Debian testing watch)
[2026-03-27] Accepted designate 1:22.0.0~rc1-3 (source) into unstable (Thomas Goirand)
[2026-03-18] Accepted designate 1:22.0.0~rc1-2 (source) into experimental (Thomas Goirand)
[2026-03-11] Accepted designate 1:22.0.0~rc1-1 (source) into experimental (Thomas Goirand)
[2026-02-11] designate 1:21.0.0-2 MIGRATED to testing (Debian testing watch)
[2026-02-08] Accepted designate 1:21.0.0-2 (source) into unstable (Thomas Goirand)
[2025-10-04] designate 1:21.0.0-1 MIGRATED to testing (Debian testing watch)
[2025-10-01] Accepted designate 1:21.0.0-1 (source) into unstable (Thomas Goirand)
[2025-10-01] designate 1:21.0.0~rc1-4 MIGRATED to testing (Debian testing watch)
[2025-09-28] Accepted designate 1:21.0.0~rc1-4 (source) into unstable (Thomas Goirand)
[2025-09-23] Accepted designate 1:21.0.0~rc1-3 (source) into experimental (Thomas Goirand)
[2025-09-18] Accepted designate 1:21.0.0~rc1-2 (source) into experimental (Thomas Goirand)
[2025-09-13] Accepted designate 1:21.0.0~rc1-1 (source) into experimental (Thomas Goirand)
[2025-07-18] designate 1:20.0.0-2 MIGRATED to testing (Debian testing watch)
[2025-07-11] Accepted designate 1:20.0.0-2 (source) into unstable (Thomas Goirand)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 25)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
l10n (-, 100)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:23.0.0-0ubuntu1
4 bugs
patches for 1:23.0.0-0ubuntu1