Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-8h22-6qwx-q4w9

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8h22-6qwx-q4w9

OpenStack Ironic fails to verify checksums of supplied image_source URLs In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

gitlab/pypi/ironic/CVE-2024-47211

OpenStack Ironic fails to verify checksums of supplied image_source URLs In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

pypa/ironic/PYSEC-2026-1468

OpenStack Ironic fails to verify checksums of supplied image_source URLs In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

pysec/PYSEC-2026-1468

OpenStack Ironic fails to verify checksums of supplied image_source URLs In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.