mistral - Debian Package Tracker

general

source: mistral (main)
version: 23.0.0-2
maintainer: Debian OpenStack (DMD)
uploaders: Thomas Goirand [DMD] – Michal Arbet [DMD]
arch: all
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 11.0.0-2
oldstable: 15.0.0-1+deb12u1
old-sec: 15.0.0-1+deb12u1
old-p-u: 15.0.0-1+deb12u1
stable: 20.0.0-2+deb13u1
stable-sec: 20.0.0-2+deb13u1
testing: 23.0.0-1
unstable: 23.0.0-2

versioned links

11.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
15.0.0-1+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20.0.0-2+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
23.0.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
23.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

mistral-api
mistral-common
mistral-engine
mistral-event-engine
mistral-executor
python3-mistral

action needed

Marked for autoremoval on 12 November due to ipywidgets: #1149422 high

Version 23.0.0-1 of mistral is marked for autoremoval from testing on Thu 12 Nov 2026. It depends (transitively) on ipywidgets, affected by #1149422. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-10-07 Last update: 2026-10-10 00:20

4 security issues in trixie high

There are 4 open security issues in trixie.

4 important issues:

CVE-2026-93858: In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.
CVE-2026-93860: In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.
CVE-2026-93861: In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
CVE-2026-97147: In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.

Created: 2026-10-09 Last update: 2026-10-09 18:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

TEMP-1138849-FDBA9E:

Created: 2026-06-03 Last update: 2026-10-09 18:30

5 security issues in forky high

There are 5 open security issues in forky.

5 important issues:

CVE-2026-93858: In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.
CVE-2026-93860: In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.
CVE-2026-93861: In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
CVE-2026-97147: In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.
TEMP-1138849-FDBA9E:

Created: 2026-06-03 Last update: 2026-10-09 18:30

5 security issues in bookworm high

There are 5 open security issues in bookworm.

4 important issues:

CVE-2026-93858: In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.
CVE-2026-93860: In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.
CVE-2026-93861: In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
CVE-2026-97147: In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.

1 ignored issue:

TEMP-1138849-FDBA9E:

Created: 2026-10-09 Last update: 2026-10-09 18:30

2 security issues in bullseye high

There are 2 open security issues in bullseye.

2 important issues:

CVE-2026-41283: OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
TEMP-1138849-FDBA9E:

Created: 2026-06-03 Last update: 2026-08-02 20:32

lintian reports 12 warnings normal

Lintian reports 12 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-09-21 Last update: 2026-10-01 15:00

2 open merge requests in Salsa normal

There are 2 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-09-29 Last update: 2026-09-29 15:30

debian/patches: 2 patches to forward upstream low

Among the 11 debian patches available in version 23.0.0-2 of the package, we noticed the following issues:

2 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2025-10-03 Last update: 2026-10-09 19:50

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-10-09 19:50

testing migrations

excuses:
- Migration status for mistral (23.0.0-1 to 23.0.0-2): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Autopkgtest for mistral/23.0.0-2: amd64: Pass, arm64: Test triggered, armhf: No tests, superficial or marked flaky ♻, i386: Test triggered, ppc64el: Test triggered, riscv64: Test triggered (failure will be ignored), s390x: Pass
- ∙ ∙ Too young, only 1 of 2 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/m/mistral.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-10-09] Accepted mistral 23.0.0-2 (source) into unstable (Thomas Goirand)
[2026-10-06] mistral 23.0.0-1 MIGRATED to testing (Debian testing watch)
[2026-09-30] Accepted mistral 23.0.0-1 (source) into unstable (Thomas Goirand)
[2026-09-20] Accepted mistral 23.0.0~rc1-2 (source) into unstable (Thomas Goirand)
[2026-09-08] Accepted mistral 23.0.0~rc1-1 (source) into experimental (Thomas Goirand)
[2026-07-28] Accepted mistral 22.0.0-3 (source) into unstable (Thomas Goirand)
[2026-07-20] mistral REMOVED from testing (Debian testing watch)
[2026-06-09] Accepted mistral 15.0.0-1+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-06-09] Accepted mistral 20.0.0-2+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-06-09] Accepted mistral 15.0.0-1+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-06-09] Accepted mistral 20.0.0-2+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Thomas Goirand)
[2026-04-07] mistral 22.0.0-1 MIGRATED to testing (Debian testing watch)
[2026-04-01] Accepted mistral 22.0.0-1 (source) into unstable (Thomas Goirand)
[2026-04-01] mistral 22.0.0~rc1-3 MIGRATED to testing (Debian testing watch)
[2026-03-27] Accepted mistral 22.0.0~rc1-3 (source) into unstable (Thomas Goirand)
[2026-03-18] Accepted mistral 22.0.0~rc1-2 (source) into experimental (Thomas Goirand)
[2026-03-12] Accepted mistral 22.0.0~rc1-1 (source all) into experimental (Thomas Goirand)
[2026-02-18] mistral 21.0.0-6 MIGRATED to testing (Debian testing watch)
[2026-02-11] Accepted mistral 21.0.0-6 (source) into unstable (Thomas Goirand)
[2025-11-07] mistral 21.0.0-5 MIGRATED to testing (Debian testing watch)
[2025-11-01] Accepted mistral 21.0.0-5 (source) into unstable (Thomas Goirand)
[2025-10-15] Accepted mistral 21.0.0-4 (source) into unstable (Thomas Goirand)
[2025-10-03] Accepted mistral 21.0.0-2 (source) into unstable (Thomas Goirand)
[2025-10-01] Accepted mistral 21.0.0-1 (source) into unstable (Thomas Goirand)
[2025-10-01] Accepted mistral 21.0.0~rc1-2 (source) into unstable (Thomas Goirand)
[2025-09-16] Accepted mistral 21.0.0~rc1-1 (source) into experimental (Thomas Goirand)
[2025-07-18] mistral 20.0.0-2 MIGRATED to testing (Debian testing watch)
[2025-07-12] Accepted mistral 20.0.0-2 (source) into unstable (Thomas Goirand)
[2025-04-07] mistral 20.0.0-1 MIGRATED to testing (Debian testing watch)
[2025-04-02] Accepted mistral 20.0.0-1 (source) into unstable (Thomas Goirand)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 12)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 23.0.0-0ubuntu1
1 bug
patches for 23.0.0-0ubuntu1