Skip to content
OpenAdvisories
Medium RHSA-2025:0439 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 18.0.4 (openstack-ironic) security update

Published Jan 23, 2025 · Updated Aug 12, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 18 openstack:18.0::el9 openstack-ironic 1:21.4.5-18.0.20241207142602.9213ccd.el9ost
Red Hat · OpenStack 18 openstack:18.0::el9 openstack-ironic-api 1:21.4.5-18.0.20241207142602.9213ccd.el9ost
Red Hat · OpenStack 18 openstack:18.0::el9 openstack-ironic-common 1:21.4.5-18.0.20241207142602.9213ccd.el9ost
Red Hat · OpenStack 18 openstack:18.0::el9 openstack-ironic-conductor 1:21.4.5-18.0.20241207142602.9213ccd.el9ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-47211

    OpenStack Ironic fails to verify checksums of supplied image_source URLs

    In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

    ironic ironic ironic Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2315010
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0439.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-47211
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47211
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47211