commit 731185f85e54346530c8b84ea96c014f5b2f7566
author Yaguang Tang <yaguang.tang@vexxhost.com> Tue Sep 24 10:37:54 2024 +0800
committer GitHub <noreply@github.com> Tue Sep 24 02:37:54 2024 +0000
tree 0081898a9203626a0708577d178ef37a28c42ff9
parent 70538bdd4af15bec8bd74ac4a6a77303976e1e49

[ATMOSPHERE-447] Ironic Unvalidated image data passed to qemu-img (CVE-2024-44082) (#1881)

images/ironic/Dockerfile

diff --git a/images/ironic/Dockerfile b/images/ironic/Dockerfile
index d304a33..4744392 100644
--- a/images/ironic/Dockerfile
+++ b/images/ironic/Dockerfile
@@ -4,7 +4,7 @@
 ARG RELEASE
 
 FROM registry.atmosphere.dev/library/openstack-venv-builder:${RELEASE} AS build
-ARG IRONIC_GIT_REF=aa479f4426afe599a4494d57904daea6321ca4c7
+ARG IRONIC_GIT_REF=009f73717cee1c4d523c75d9232cc11902c9173a
 ADD --keep-git-dir=true https://opendev.org/openstack/ironic.git#${IRONIC_GIT_REF} /src/ironic
 RUN git -C /src/ironic fetch --unshallow
 RUN --mount=type=cache,mode=0755,target=/root/.cache/pip,sharing=private <<EOF bash -xe