commit e2c7a684588c55b1fe84dfdfaa306f35d6cb9e41
author Yaguang Tang <yaguang.tang@vexxhost.com> Tue Sep 24 10:34:08 2024 +0800
committer GitHub <noreply@github.com> Tue Sep 24 02:34:08 2024 +0000
tree c06e15496d46fb7e02031a5d226d929e42c0789a
parent 0b2ecf2193be4e555e776ff97a7797e40ec0b2fc

[ATMOSPHERE-445] Ironic Unvalidated image data passed to qemu-img (CVE-2024-44082) (#1883)

https://bugs.launchpad.net/ironic/+bug/2071740

images/ironic/Dockerfile

diff --git a/images/ironic/Dockerfile b/images/ironic/Dockerfile
index 68d9f6a..8003a75 100644
--- a/images/ironic/Dockerfile
+++ b/images/ironic/Dockerfile
@@ -4,7 +4,7 @@
 ARG RELEASE
 
 FROM registry.atmosphere.dev/library/openstack-venv-builder:${RELEASE} AS build
-ARG IRONIC_GIT_REF=995fa6c048297211deceddb05b00bbd34ef27eb6
+ARG IRONIC_GIT_REF=d0fb7bce54e9d241a4442ef2347ac51ee1f4d7af
 ADD --keep-git-dir=true https://opendev.org/openstack/ironic.git#${IRONIC_GIT_REF} /src/ironic
 RUN git -C /src/ironic fetch --unshallow
 RUN --mount=type=cache,mode=0755,target=/root/.cache/pip,sharing=private <<EOF bash -xe