Debian Patches

Status for mistral/22.0.0-3

Patch Description Author Forwarded Bugs Origin Last update
install-missing-files.patch Install missing files Thomas Goirand <zigo@debian.org> not-needed 2018-02-25
Load_defaults_from_oslo.concurrency.patch Load defaults from oslo.concurrency Under my env (ie: Debian packages), I've seen mistral-api trying to
write under:
.
/var/lock/nova/oslo_read_shm_<HOSTNAME>_mistral-api
.
Why /var/lock/nova is a mistery, but I want to fix this.
.
This patch:
.
Ensures oslo.concurrency lockutils uses the value from the parsed config.
oslo.concurrency registers its opts on import, so the option exists;
call set_defaults *after* CONF(...) so we pick up any value from files.
.
Sets the lockutils default to the configured path so external locks
(synchronized(external=True)) use the right directory.

diff --git a/mistral/config.py b/mistral/config.py
index 46ccaa2..01a634c 100644		 Thomas Goirand <zigo@debian.org> no 2025-10-03
cve-2026-41283-stable-2026.1.patch [PATCH 1/8] Restrict publicize policies to admin only
The publicize policy for workflows, actions, and event triggers
was using admin_or_owner which allowed any project member to make
resources public. This changes all publicize policies to admin_only.

Also adds missing publicize enforcement on event triggers (update),
and introduces a consistent event_triggers:publicize policy replacing
the former event_triggers:create:public.		 Arnaud Morin <arnaud.morin@gmail.com> no 2026-03-30
OSSN-0098_Strip_sensitive_info_from_workflow_execution_context.patch [PATCH] Strip sensitive info from workflow execution context Remove the Keystone auth_token and service_catalog from the openstack
data stored in the workflow execution context. This prevents the token
from being persisted in the database, exposed to workflow authors via
$.openstack.auth_token YAQL expressions, and leaked in error log
messages.
.
Actions are not affected as they receive their token through the RPC context.

diff --git a/doc/source/user/wf_lang_v2.rst b/doc/source/user/wf_lang_v2.rst
index 0f4ccbb..a0b23f9 100644		 Arnaud Morin <arnaud.morin@gmail.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/mistral/+/991391 2026-06-05

All known versions for source package 'mistral'

Links