-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jun 2026 12:47:29 +0200 Source: ironic Architecture: source Version: 1:21.4.4-0+deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1140012 1140187 1144214 Changes: ironic (1:21.4.4-0+deb12u2) bookworm-security; urgency=medium . * Add follow-up patch for CVE-2026-46447 (erata1): "Fix kernel parameter parsing for quoted values and whitespace". * CVE-2026-54421: Sensitive properties returned unredacted in POST and PATCH HTTP responses. Added upstream patch: "Fix sensitive properties returned on volume targets" (Closes: #1140012). * CVE-2026-43003 / OSSN-2026-0100: Command injection via chroot execution of tenant-controlled binaries. Added upstream patch: "Add an agent flag to disable installing boatloaders" (Closes: #1140187). * OSSN-0106: API ramdisk endpoints require network-level access controls. Added upstream patch: "Add [api] enable_ramdisk_endpoints config option" (Closes: #1144214). Checksums-Sha1: 03272a3f826c9fff3f7b9befee0ae4a2e1e27114 4097 ironic_21.4.4-0+deb12u2.dsc 11a01ab37bd81ba31e2ff1d511a5976ca3bf7651 1573012 ironic_21.4.4.orig.tar.xz 190b70deaf09e18a6ae6b93b353755df64d53b01 68416 ironic_21.4.4-0+deb12u2.debian.tar.xz b595685e9d822d2d4b601a77ba55fb108e9c1ae2 23384 ironic_21.4.4-0+deb12u2_amd64.buildinfo Checksums-Sha256: d9cb406b75397684734e39877602c74b271ee58c1791946de5ce9df9bc5b6113 4097 ironic_21.4.4-0+deb12u2.dsc f7e7a771594958ad0355a27854c69dc5c7404acfb301073da980a1c966b4a65f 1573012 ironic_21.4.4.orig.tar.xz e4d77319297c96af5f882f55e1487befaded3913e832420d6ff66794e6dee413 68416 ironic_21.4.4-0+deb12u2.debian.tar.xz 4000b9552dd0438afc60b138183758c46bdd61c876bf8feee2894aa2dea8082a 23384 ironic_21.4.4-0+deb12u2_amd64.buildinfo Files: 5562d547e6759b5848e3590dbe64a78e 4097 net optional ironic_21.4.4-0+deb12u2.dsc 3dce1b73c9fc5033a096fd30751439f3 1573012 net optional ironic_21.4.4.orig.tar.xz f46b1d5d50549d34d5428b32632004c8 68416 net optional ironic_21.4.4-0+deb12u2.debian.tar.xz ad856c2fd6a18e69e8e5812e3e40cabc 23384 net optional ironic_21.4.4-0+deb12u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmqBpDMACgkQ1BatFaxr Q/6BZg/+J+jv9g5Osc7rfm1/EE0x7Yua/lNYmNyvQOtpoOB8Tn7zVm0MeZjSU2Z2 J3CxVqqmt2Q2+uoEAWLAOwgnK4l/punu6HHAps/qWwoui+VUgc1TyD0fSt+1/GMa 5TkQTxLykGga5CUcgYqeQLE+STZoayuaB13ZhL0V1ubm18WaMZjP/k1xKemf9u4a ee52pb6dIo6BH/GERUEFJTjN1RfsWBz7OOwChIDfGbtPugYmmwI8XP9pp6SczF/S w2YbgghfzBuAWQhdRt7FRFkuHP4KK0XWtDhBjYnSS0lYioCCdZ5zXCSlTn8JYR4R 5ni/Q+K9Q5wDAObA/oOkNpawpZWvtRfXsPovvIyNfQolczO3z3qMFTUnP2+ktqEd +IJ4B13JFUoBo0IU+0j6sTw6R62bKB1xLHUxq0kBxnCuZGVvx6gTStPdwU1mgTGe gC4HQbAtHVFXrKnQ+Ig2/7Cns9PwFc5fiyyaERLCjAUSrYuBjMfkDQ4AR1c5f9qc pSgbdmKLZYenKNSa0gTUcVaiGJAewP8waYpSUuoQZCiw62REHpPowPmpnPpVX8GX ZJ5Vlu7SqHThFnR1hAodryAzZuQbXQHnRzc6H94L+dqeSQOSepvmmQT8O4+co5RA mdKOIXC0cHbBKwEIPR2983ePeGbsfuVuThhumJ4wISX5HD6lxoQ= =2rUn -----END PGP SIGNATURE-----
