Homepage

ironic@20.1.3 vulnerabilities

OpenStack Bare Metal Provisioning

  • latest version

    29.0.0

  • latest non vulnerable version

    29.0.0

  • first published

    6 years ago

  • latest version published

    1 months ago

  • licenses detected

  • View ironic package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the ironic package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Improper Validation of Integrity Check Value

    ironic is an OpenStack Bare Metal Provisioning

    Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due missing validations of checksum files of supplied image_source URLs, before the raw format conversion.

    How to fix Improper Validation of Integrity Check Value?

    Upgrade ironic to version 21.4.4, 23.0.3, 24.1.3, 26.1.1 or higher.

    [,21.4.4)[22.0.0,23.0.3)[23.1.0,24.1.3)[25.0.0,26.1.1)
    • H
    Information Exposure

    ironic is an OpenStack Bare Metal Provisioning

    Affected versions of this package are vulnerable to Information Exposure via the image processing in qemu-img. Note: This is exploitable only for authenticated users.

    How to fix Information Exposure?

    Upgrade ironic to version 21.4.3, 23.0.2, 24.1.2, 26.1.0 or higher.

    [,21.4.3)[22.0.0,23.0.2)[23.1.0,24.1.2)[25.0.0,26.1.0)
    Go back to all versions of this package