Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump Kolla images for CVE-2024-36039 #1115

Merged
merged 2 commits into from
Jul 5, 2024
Merged

Bump Kolla images for CVE-2024-36039 #1115

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9e79b8f
Bump Kolla images for CVE-2024-36039
assumptionsandg Jun 26, 2024
122a5f1
CI: Increase volume size to 40GB
assumptionsandg Jul 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/stackhpc-all-in-one.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -167,7 +167,7 @@ jobs:
VM_NETWORK: ${{ inputs.vm_network }}
VM_SUBNET: ${{ inputs.vm_subnet }}
VM_INTERFACE: ${{ inputs.vm_interface }}
VM_VOLUME_SIZE: ${{ inputs.upgrade && '50' || '35' }}
VM_VOLUME_SIZE: ${{ inputs.upgrade && '50' || '40' }}
VM_TAGS: '["skc-ci-aio", "PR=${{ github.event.number }}"]'

- name: Terraform Plan
Expand Down
9 changes: 3 additions & 6 deletions etc/kayobe/kolla-image-tags.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,14 +4,14 @@
# where the key is the OS distro and the value is the tag to deploy.
kolla_image_tags:
openstack:
rocky-9: 2023.1-rocky-9-20240621T104542
ubuntu-jammy: 2023.1-ubuntu-jammy-20240621T104542
seunghun1ee marked this conversation as resolved.
Show resolved Hide resolved
bifrost_deploy:
rocky-9: 2023.1-rocky-9-20240423T125905
ubuntu-jammy: 2023.1-ubuntu-jammy-20240423T125905
cinder:
rocky-9: 2023.1-rocky-9-20240701T123544
ubuntu-jammy: 2023.1-ubuntu-jammy-20240701T123544
cloudkitty:
rocky-9: 2023.1-rocky-9-20240509T111619
ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T111619
glance:
rocky-9: 2023.1-rocky-9-20240701T123544
ubuntu-jammy: 2023.1-ubuntu-jammy-20240701T123544
Expand All @@ -21,9 +21,6 @@ kolla_image_tags:
letsencrypt:
rocky-9: 2023.1-rocky-9-20240509T102329
ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329
magnum:
rocky-9: 2023.1-rocky-9-20240607T082105
ubuntu-jammy: 2023.1-ubuntu-jammy-20240607T082105
nova:
rocky-9: 2023.1-rocky-9-20240702T082319
ubuntu-jammy: 2023.1-ubuntu-jammy-20240702T082319
Expand Down
7 changes: 7 additions & 0 deletions releasenotes/notes/kolla-bump-cve-2024-36039-07f18e18b5c86980.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
security:
- |
Addresses critical vulnerability CVE-2024-36039 by
bumping the PyMySQL library to 1.1.1 in all affected
Kolla images. This vulnerability allows SQL injection
through untrusted JSON objects.
Loading