Description
In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ironic | 1:26.1.0-1 | — |
| Debian 14 | ironic-python-agent | 9.14.0-1 | — |
| Debian 13 | ironic | 1:26.1.0-1 | — |
| Debian 13 | ironic-python-agent | 9.14.0-1 | — |
| Debian 12 | ironic | 1:21.4.4-0+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ironic +1 | No fix yet | — |
| Ubuntu 26.04 LTS | ironic +1 | No fix yet | — |
| Ubuntu 25.10 | ironic +1 | No fix yet | — |
| Ubuntu 24.04 LTS | ironic | 1:24.1.1-0ubuntu1.2 | USN-6989-1 |
| Ubuntu 24.04 LTS | ironic-python-agent | No fix yet | — |
| Ubuntu 22.04 LTS | ironic | 1:20.1.0-0ubuntu1.2 | USN-6989-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | ironic | No fix yet | — |
| Ubuntu 18.04 LTS | ironic | No fix yet | — |
| Ubuntu 16.04 LTS | ironic | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Openshift Ironic 4 | openstack-ironic +5 | 1:21.0.1-0.20240913135525.114badc.el9 | RHSA-2024:8694, RHSA-2024:7941 |
| Red Hat Openshift Ironic 4 | python-webob +1 | 1.8.8-2.el9 | RHSA-2024:7941 |
| Red Hat OpenStack 17 | openstack-ironic +3 | 1:17.1.1-17.1.20240917210749.c31db88.el9ost | RHSA-2024:9982 |
| Red Hat OpenStack 16 | openstack-ironic +3 | 1:13.0.8-2.20230713045150.d10fd5c.el8ost | RHSA-2025:0204 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-4.rhaos4.12.el8 | RHSA-2024:8694 |
| Red Hat OpenShift 4 | cri-o | 1.25.5-5.rhaos4.12.git53dc492.el9 | RHSA-2024:8694 |
| Red Hat OpenShift 4 | podman +6 | 3:4.2.0-12.rhaos4.12.el9 | RHSA-2024:8694, RHSA-2024:7941 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.9.4-7.rhaos4.12.el8 | RHSA-2024:8694, RHSA-2024:7941 |
Advisories 6
- WID-SEC-2024-3522 Red Hat OpenStack Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2024:8694 Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:7941 Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9982 Red Hat Security Advisory: RHOSP 17.1.4 (openstack-ironic) security update Red Hat Security Advisories (RHSA) · May 1, 2026
- RHSA-2025:0204 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-ironic) security update Red Hat Security Advisories (RHSA) · May 1, 2026
- USN-6989-1 ironic vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026