OpenStack Ironic conductor DoS via gzip-bomb configdrive
OSSA-2026-049 assigns CVE-2026-115638 and lists Ironic lines from 16.2.0 through builds before 39.0.1.
Stories per day · 30 days
3 RSS
Relatedopenstack4metal33ossa2basic-auth1credential-leak1denial-of-service1gzip-bomb1node-management1ossn1path-injection1redfish1
3 stories, newest first · one card per story
Stories tagged #ironic
Ironic Redfish vendor_passthru allows path injection (CVE-2026-90458)
OSSA-2026-047 lists Ironic from 18.1.0 through 39.0.1; the snippet does not name a fix.
[OSSN-0110] Ironic can leak basic auth credentials to image server
OpenStack Ironic can leak HTTP basic-auth credentials to a configured image server.