OSSA-2024-004：Ironic 在配置为将镜像转换为原始格式进行流式传输时，未能验证提供的 image_source URL 的校验和¶
- 日期:
2024 年 10 月 03 日
- CVE:
CVE-2024-47211
影响¶
Ironic：<21.4.4, >=22.0.0 <23.0.3, >=23.1.0 <24.1.3, >=25.0.0, <26.1.0
描述¶
红帽的 Julia Kreger 发现 Ironic 的镜像验证中存在一个漏洞，在转换镜像之前可能未验证其校验和，可能允许中间人攻击修改镜像数据。
补丁¶
https://review.opendev.org/c/openstack/ironic/+/931300 (2023.1/antelope(ironic))
https://review.opendev.org/c/openstack/ironic/+/931299 (2023.2/bobcat(ironic))
https://review.opendev.org/c/openstack/ironic/+/931295 (2024.1/caracal(ironic))
https://review.opendev.org/c/openstack/ironic/+/931294 (2024.2/dalmatian(ironic))
https://review.opendev.org/c/openstack/ironic/+/931293 (2025.1/epoxy (ironic))
https://review.opendev.org/c/openstack/ironic/+/931298 (Bugfix/24.0 (ironic))
https://review.opendev.org/c/openstack/ironic/+/931297 (Bugfix/25.0 (ironic))
https://review.opendev.org/c/openstack/ironic/+/931296 (Bugfix/26.0 (ironic))
https://review.opendev.org/c/openstack/ironic/+/931305 (Unmaintained/victoria(ironic))
https://review.opendev.org/c/openstack/ironic/+/931304 (Unmaintained/wallaby(ironic))
https://review.opendev.org/c/openstack/ironic/+/931303 (Unmaintained/xena(ironic))
https://review.opendev.org/c/openstack/ironic/+/931302 (Unmaintained/yoga(ironic))
https://review.opendev.org/c/openstack/ironic/+/931301 (Unmaintained/zed(ironic))
鸣谢¶
红帽的 Julia Kreger (CVE-2024-47211)
参考¶
说明¶
没有其他与 Ironic 相关的项目，包括 Ironic-Python-Agent，需要进行补丁来解决此漏洞。
像往常一样，我们将提供维护分支的更新版本，但不会为 bugfix 或未维护分支创建新版本。
