openstack/aodh

In the Mailing-List Digests

Weekly issues that touched openstack/aodh, newest first.

• 2026-10-10 OSSN-0109 — Gnocchi cross-project metric association: POST /v1/metric applied no policy on the resource_id in the request body, letting an attacker inject measures into another…
• 2026-08-22 OSSA-2026-036 — Aodh + Watcher (CVE-2026-76878). Chen YuXiang (ICT, Chinese Academy of Sciences) found that Aodh does not enforce project scope on alarm listing when…
• 2026-05-16 TC: SRBAC moves toward closure. Goutham Pacha Ravi's R-20 weekly summary (milestone-1 of 2026.2 "Hibiscus") reports that Ghanshyam Maan plans to remove the enforce_scope…
• 2026-05-09 SRBAC enforce_scope removal is for real. Ghanshyam Maan tagged the five projects still disabling it — Cinder, Tacker, Aetos, Aodh, Barbican — and pushed test changes to each…
• 2026-05-02 Watcher (summary, etherpad). Native threading is the default for 2026.2; eventlet code removal scheduled for early 2027.1 (around November 2026). Prometheus deprecation in…
• 2025-09-27 Aodh + Ceilometer Prometheus backend alarms — Matthias Runge confirmed Aodh has supported a Prometheus evaluator (CI-tested) since aodh's prometheus.py was added two years ago…