tocsin

Debian/ironic: high 8.1

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

Action: Upgrade ironic to 1:21.4.4-0+deb12u1 or later.

Affected

introducedfixedlast affected
01:21.4.4-0+deb12u1-

Fixed versions

1:21.4.4-0+deb12u1

Sources

published · modified · JSON