Debian Patches

Status for watcher/16.0.0-5

Patch Description Author Forwarded Bugs Origin Last update
install-all-files.patch Also package Alembic migration scripts Thomas Goirand <zigo@debian.org> no 2026-03-13
remove-sphinxcontrib.rsvgconverter.patch Remove sphinxcontrib.rsvgconverter This isn't packaged in Debian.

===================================================================		 Thomas Goirand <zigo@debian.org> not-needed 2019-10-02
removed-sphinxcontrib.httpdomain-from-sphinx-ext.patch Removed sphinxcontrib.httpdomain from sphinx ext. Thomas Goirand <zigo@debian.org> no 2021-03-23
make-watcher-reproducible.patch Make Watcher reproducible Add a sample_default to the host directive. This makes the package
reproducible. Otherwise, the build machine hostname is leaking in
the configuration file.
.
If you don't know about reproducible build, please read on:
https://reproducible-builds.org/

===================================================================		 Thomas Goirand <zigo@debian.org> yes debian 2026-07-28
CVE-2026-XXXXX-watcher-lp-2161771-2026.1.patch Add policy enforcement to webhook trigger endpoint The webhook POST endpoint (/v1/webhooks/{audit_uuid}) was entirely
unprotected even when [api] enable_webhooks_auth was set to True, as no
oslo_policy check was applied to the request.
.
This patch introduce a new webhook policy module with a webhook:trigger rule
backed by the new admin_or_service_api base rule (role:admin,
role:administrator, or role:service). The policy is enforced in the
WebhookController.post() method when enable_webhooks_auth is enabled,
rejecting callers that do not hold one of the required roles with HTTP 403.
When enable_webhooks_auth is False the endpoint remains unauthenticated and
no policy check is applied.

diff --git a/releasenotes/notes/bug-2161771-add-policy-enforcement-event-audit-596288dbff87bd0d.yaml b/releasenotes/notes/bug-2161771-add-policy-enforcement-event-audit-596288dbff87bd0d.yaml
new file mode 100644
index 00000000..57c3b6e9		 Douglas Viroel <viroel@gmail.com> yes debian upstream upstream, https://bugs.launchpad.net/ossa/+bug/2161771 2026-08-13

All known versions for source package 'watcher'

Links