commit e929ac2eb75d4d72dea04e2dfb8bd1e7c3707b67
author Yaguang Tang <yaguang.tang@vexxhost.com> Tue Sep 24 10:31:16 2024 +0800
committer GitHub <noreply@github.com> Tue Sep 24 02:31:16 2024 +0000
tree 9af195d748c35581746395736b5a37de2d8cd9ca
parent 04f45afc831eaf11049e66ebb35a9573e017457c

[ATMOSPHERE-444] ironic unvalidated image data passed to qemu img CVE 2024 44082 (#1880)

Bump to latest ironic stable/2024.1 to fix CVE-2024-44082

images/ironic/Dockerfile

diff --git a/images/ironic/Dockerfile b/images/ironic/Dockerfile
index 5d5859a..28856fe 100644
--- a/images/ironic/Dockerfile
+++ b/images/ironic/Dockerfile
@@ -4,7 +4,7 @@
 ARG RELEASE
 
 FROM registry.atmosphere.dev/library/openstack-venv-builder:${RELEASE} AS build
-ARG IRONIC_GIT_REF=84fb43b81b9aab2e579ea961cb692a331ddf2125
+ARG IRONIC_GIT_REF=19de7ae2f48705cfa0e59d0642cec3cca7b6ca22
 ADD --keep-git-dir=true https://opendev.org/openstack/ironic.git#${IRONIC_GIT_REF} /src/ironic
 RUN git -C /src/ironic fetch --unshallow
 RUN --mount=type=cache,mode=0755,target=/root/.cache/pip,sharing=private <<EOF bash -xe