{"id":"CVE-2024-44082","aliases":["DEBIAN-CVE-2024-44082","EUVD-2024-40852","RHSA-2024:7941","RHSA-2024:8694","RHSA-2024:9982","RHSA-2025:0204","UBUNTU-CVE-2024-44082","USN-6989-1"],"status":"published","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00541,"percentile":0.45745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-862"],"published":"2024-09-04T00:00:00Z","modified":"2026-11-02T12:02:47Z","fixes":[{"ecosystem":"Debian:12","package":"ironic","fixed_in":["1:21.4.4-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ironic","fixed_in":["1:26.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ironic","fixed_in":["1:26.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ironic-python-agent","fixed_in":["9.14.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ironic-python-agent","fixed_in":["9.14.0-1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic","fixed_in":["1:17.1.1-17.1.20240917210749.c31db88.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-api","fixed_in":["1:17.1.1-17.1.20240917210749.c31db88.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-common","fixed_in":["1:17.1.1-17.1.20240917210749.c31db88.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-conductor","fixed_in":["1:17.1.1-17.1.20240917210749.c31db88.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic","fixed_in":["1:13.0.8-2.20230713045150.d10fd5c.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-api","fixed_in":["1:13.0.8-2.20230713045150.d10fd5c.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-common","fixed_in":["1:13.0.8-2.20230713045150.d10fd5c.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-conductor","fixed_in":["1:13.0.8-2.20230713045150.d10fd5c.el8ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ironic","fixed_in":["1:20.1.0-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ironic","fixed_in":["1:24.1.1-0ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.4.4-0+deb12u1"}]}],"versions":["1:21.1.0-3","1:21.1.0-3+deb12u1","1:21.3.0-1","1:21.4.0-1","1:21.4.0-2","1:21.4.0-3","1:21.4.0-4"]},{"source":"osv","ecosystem":"Debian:13","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.14.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.14.0-1"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-dnsmasq-tftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-30.rhaos4.12.git53dc492.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-30.rhaos4.12.git53dc492.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-30.rhaos4.12.git53dc492.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-5.rhaos4.12.git53dc492.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-5.rhaos4.12.git53dc492.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-5.rhaos4.12.git53dc492.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-12.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-4.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-4.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-4.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-7.rhaos4.12.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"openstack-ironic-dnsmasq-tftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.1-0.20240913135525.114badc.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.1.1-17.1.20240917210749.c31db88.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.1.1-17.1.20240917210749.c31db88.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.1.1-17.1.20240917210749.c31db88.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.1.1-17.1.20240917210749.c31db88.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.0.8-2.20230713045150.d10fd5c.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.0.8-2.20230713045150.d10fd5c.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.0.8-2.20230713045150.d10fd5c.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.0.8-2.20230713045150.d10fd5c.el8ost"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.0-0ubuntu1","1:4.3.0-0ubuntu1","1:5.1.0-0ubuntu1","1:5.1.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.1.0-0ubuntu2","1:9.2.0-0ubuntu1","1:10.0.0-0ubuntu1","1:10.1.0-0ubuntu1","1:10.1.1-0ubuntu1","1:10.1.1-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:13.0.1-0ubuntu1","1:14.0.0~b1~git2019121713.76597ca93-0ubuntu1","1:14.0.0~b1~git2019121713.76597ca93-0ubuntu2","1:14.0.0-0ubuntu1","1:14.0.1~git2020032415.de2d907fc-0ubuntu1","1:14.0.1~git2020041013.af9e6ba90-0ubuntu2","1:15.0.0-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.1.0-0ubuntu1.2"}]}],"versions":["1:18.2.0-0ubuntu1","1:18.2.0+git2021120910.cdc3b9538-0ubuntu1","1:19.0.0+git2022011216.7beadee46-0ubuntu1","1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1","1:20.1.0-0ubuntu1","1:20.1.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.1.1-0ubuntu1.2"}]}],"versions":["1:23.0.0-0ubuntu3","1:23.1.0+git2024011916.a374a0c1-0ubuntu1","1:24.1.0-0ubuntu1","1:24.1.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:29.0.0-0ubuntu1","1:30.0.0+git2025070713.577833d78-0ubuntu1","1:30.0.0+git2025070713.577833d78-0ubuntu2","1:32.0.0-0ubuntu1","1:32.0.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.14.0-5","10.2.0-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:35.0.0-0ubuntu2","1:35.0.0-0ubuntu3","1:38.0.0+git20260818.101.f8e78b0-0ubuntu1","1:38.0.0+git2026091517.26c022f13-0ubuntu1","1:39.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.2.0-2","11.5.0-2","11.5.0-3","11.5.0-4","11.5.0-5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:32.0.0-0ubuntu1","1:34.0.0-0ubuntu1","1:35.0.0-0ubuntu1","1:35.0.0-0ubuntu2","1:35.0.0-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.2.0-3","11.2.0-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.1.0-0ubuntu1.2"}]}],"versions":["1:18.2.0-0ubuntu1","1:18.2.0+git2021120910.cdc3b9538-0ubuntu1","1:19.0.0+git2022011216.7beadee46-0ubuntu1","1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1","1:20.1.0-0ubuntu1","1:20.1.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.1.1-0ubuntu1.2"}]}],"versions":["1:23.0.0-0ubuntu3","1:23.1.0+git2024011916.a374a0c1-0ubuntu1","1:24.1.0-0ubuntu1","1:24.1.1-0ubuntu1"]}],"references":[{"url":"https://bugs.launchpad.net/ironic/+bug/2071740","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/09/04/4","tags":["web"]},{"url":"https://security.openstack.org/ossa/OSSA-2024-003.html","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-44082","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7941","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309331","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7941.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3727","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42353","tags":["advisory"]},{"url":"https://github.com/Pylons/webob","tags":["article"]},{"url":"https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b","tags":["article"]},{"url":"https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44082","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44082","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8694","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317467","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8694.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-9341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-9341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9341","tags":["advisory"]},{"url":"https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L169","tags":["article"]},{"url":"https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L349","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-9676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-9676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9676","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wq2p-5pc6-wpgf","tags":["advisory"]},{"url":"https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34155","tags":["advisory"]},{"url":"https://go.dev/cl/611238","tags":["article"]},{"url":"https://go.dev/issue/69138","tags":["article"]},{"url":"https://groups.google.com/g/golang-dev/c/S9POB9NCTdk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3105","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34156","tags":["advisory"]},{"url":"https://go.dev/cl/611239","tags":["article"]},{"url":"https://go.dev/issue/69139","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3106","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34158","tags":["advisory"]},{"url":"https://go.dev/cl/611240","tags":["article"]},{"url":"https://go.dev/issue/69141","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3107","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9982","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9982.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0204","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0204.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-44082","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6989-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-44082","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-06T00:00:00Z","modified":"2024-11-06T18:45:17.902Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-40852","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-06T00:00:00Z","modified":"2024-11-06T18:45:17Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:09.226597Z"}],"nvd":[{"id":"CVE-2024-44082","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-06T01:15:11.15Z","modified":"2026-06-17T07:52:16.49Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:24.514378Z"}],"osv":[{"id":"DEBIAN-CVE-2024-44082","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-06T01:15:11.15Z","modified":"2026-11-02T12:02:47.817570526Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:43.473331Z"},{"id":"RHSA-2024:7941","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update","status":"published","published":"2024-10-17T00:27:10Z","modified":"2026-10-14T10:05:16Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8694","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update","status":"published","published":"2024-11-13T21:19:31Z","modified":"2026-10-17T10:04:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9982","title":"Red Hat Security Advisory: RHOSP 17.1.4 (openstack-ironic) security update","status":"published","published":"2024-11-25T09:53:30Z","modified":"2026-05-01T10:35:46.399124Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0204","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-ironic) security update","status":"published","published":"2025-01-10T10:02:58Z","modified":"2026-05-01T10:34:08.431022Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-44082","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-10-17T12:56:45.478127969Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:58.679387Z"},{"id":"CVE-2024-44082","description":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","status":"published","published":"2024-09-06T01:15:11Z","modified":"2026-04-10T05:16:37.996992Z","updated_at":"2026-11-02T15:44:42.322107Z"},{"id":"USN-6989-1","title":"ironic vulnerability","description":"Dan Smith, Julia Kreger and Jay Faulkner discovered that in\nimage processing for Ironic, a specially crafted image\ncould be used by an authenticated user to exploit undesired behaviors\nin qemu-img, including possible unauthorized access to potentially\nsensitive data.\n","status":"published","published":"2024-09-04T16:04:06Z","modified":"2026-04-27T17:26:21.286784Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}