Red Hat Security AdvisoryRHSA-2025:0439
Red Hat OpenStack Platform 18.0.4 (openstack-ironic) security update
Released 2025-01-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Services on OpenShift 18.0 openstack-ironic-1:21.4.5-18.0.20241207142602.9213ccd.el9ost, openstack-ironic-api-1:21.4.5-18.0.20241207142602.9213ccd.el9ost, openstack-ironic-common-1:21.4.5-18.0.20241207142602.9213ccd.el9ost +1
Fixes 1 record
Priority LOW 25
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to conver…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00663 · Published 2024-10-04 · Fixed in 26.1.1, 24.1.3 +1 CWE-354