Debian Patches
Status for ironic/1:39.0.0-6
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| adds-alembic.ini-in-MANIFEST.in.patch | Fixes MANIFEST.in so that alembic.ini is packaged | Thomas Goirand <zigo@debian.org> | no | 2016-03-22 | ||
| fix-initial_grub_cfg.template.patch | Fix initial_grub_cfg.template The default grub.cfg happen /srv/tftp, but tftp-hpa is, in Debian, already doing a chroot in there. |
Thomas Goirand <zigo@debian.org> | no | 2024-09-16 | ||
| do-not-print.patch | Do not print Without this patch, we're getting: . File "/<<PKGBUILDDIR>>/ironic/tests/unit/api/base.py", line 115, in _request_json print(method.upper(), full_path, "WITH", params, "GOT", str(response)) BlockingIOError: [Errno 11] write could not complete without blocking . about 60 times (not always the same number of times...). =================================================================== |
Thomas Goirand <zigo@debian.org> | not-needed | 2023-10-05 | ||
| fix-redfish-firmware-tests-hanging-on-network.patch | Mock cache_firmware_components() in redfish firmware unit tests The test_continue_updates_last, test_continue_updates_last_service, test_final_update_with_reboot_flag_triggers_reboot and test_final_update_without_reboot_flag_no_reboot unit tests were calling the real, unmocked RedfishFirmware.cache_firmware_components() method, which makes actual HTTP connections to the node's fake BMC address (https://example.com) using sushy, with up to 5 attempts of a 30 seconds connect timeout each. In restricted-network build environments (egress silently dropped), this hangs for ~166 seconds, which is past the 60 seconds per-test SIGALRM timeout installed by fixtures.Timeout() in ironic.tests.base, so the stestr worker gets killed ("Alarm clock"), the in-flight test is reported as failed with an empty traceback, and the build fails. Mock the call out like the neighboring _validate_resources_stability one, making these tests hermetic and deterministic. |
yes | debian | 2026-10-06 | ||
| CVE-2026-90458_OSSA-2026-047_Validate-BMC-subscription-IDs-in-Redfish-vendor-passthrough-methods.patch | Validate BMC subscription IDs in Redfish vendor passthrough methods Previously no validation (other than presence) of BMC subscription IDs was performed. This opened the possibility of an attacker crafting a malicious BMC subscription ID which would allow the attacker to issue arbitrary HTTP DELETEs (via delete_subscription) and arbitrary HTTP GETs (via get_subscription) on the BMC's Redfish root under the conductor's BMC-admin identity. . Addresses CVE-2026-90458. diff --git a/ironic/common/validate.py b/ironic/common/validate.py new file mode 100644 index 0000000..8803ed2 |
Clif Houck <me@clifhouck.com> | yes | debian upstream | upstream, https://review.opendev.org/c/openstack/ironic/+/1011862 | 2026-10-22 |
| CVE-2026-89419_OSSA-2026-048_Security-Fix-maintenance-state-update-policy-bypass.patch | Security: Fix maintenance state update policy bypass Fixes maintenance state update requests bypassing set_maintenance policy checks due to a missing '/maintenance' and 'maintenance_reason' endpoints in the patch validation gate. . Addresses CVE-2026-89419. diff --git a/ironic/api/controllers/v1/node.py b/ironic/api/controllers/v1/node.py index 7279c48..084b06c 100644 |
Afonne-CID <afonnepaulc@gmail.com> | yes | debian upstream | upstream, https://review.opendev.org/c/openstack/ironic/+/1011863 | 2026-10-22 |
All known versions for source package 'ironic'
- 1:39.0.0-6 (sid)
- 1:35.0.1-10 (forky)
- 1:29.0.5-0+deb13u3 (trixie, trixie-security)
- 1:21.4.4-0+deb12u2 (bookworm-security)
- 1:21.4.4-0+deb12u1 (bookworm)