commit 15873e6ab1cda189c45a8c7f00bca61955076b0d
author Yaguang Tang <yaguang.tang@vexxhost.com> Tue Sep 24 10:34:06 2024 +0800
committer GitHub <noreply@github.com> Tue Sep 24 02:34:06 2024 +0000
tree 0df763d1479ae4bff3bb21a63346bc97893d9ecf
parent 4ccd678609bed968142d0702ee7725eb05e5e7cc

[ATMOSPHERE-446] ironic unvalidated image data passed to qemu img (CVE-2024-44082) (#1882)

images/ironic/Dockerfile

diff --git a/images/ironic/Dockerfile b/images/ironic/Dockerfile
index 257da3d..de35186 100644
--- a/images/ironic/Dockerfile
+++ b/images/ironic/Dockerfile
@@ -4,7 +4,7 @@
 ARG RELEASE
 
 FROM registry.atmosphere.dev/library/openstack-venv-builder:${RELEASE} AS build
-ARG IRONIC_GIT_REF=c51cf2859140884150422f423d2e91119972eaac
+ARG IRONIC_GIT_REF=b9631245859596e53e048e64a17d9d4606169275
 ADD --keep-git-dir=true https://opendev.org/openstack/ironic.git#${IRONIC_GIT_REF} /src/ironic
 RUN git -C /src/ironic fetch --unshallow
 RUN --mount=type=cache,mode=0755,target=/root/.cache/pip,sharing=private <<EOF bash -xe