ironic (1:20.1.0-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: sanitize kernel_append_params to prevent injection
    - debian/patches/CVE-2026-46447.patch: Validate kernel_append_params
      against a kernel command line grammar and reject malformed
      parameters. Add disable_kernel_parameter_parsing config option.
    - CVE-2026-46447
  * SECURITY UPDATE: disable insecure driver_info pxe_template override
    - debian/patches/CVE-2026-44917.patch: Remove direct file path support
      for pxe_template to prevent privilege escalation.
    - CVE-2026-44917
  * SECURITY UPDATE: prevent directory traversal in ISO9660 image handling
    - debian/patches/CVE-2026-48681.patch: Validate ISO9660 path entries
      to reject directory traversal attempts in config drive ISO images.
    - CVE-2026-48681

 -- Federico Quattrin <federico.quattrin@canonical.com>  Thu, 11 Jun 2026 10:35:32 -0300

ironic (1:20.1.0-0ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: ensure underlying environment details not leaked when a
    maliciously crafted image is used (LP: #2071740).
    - d/p/CVE-2024-44082.patch: Harden all image handling and conversion code.
    - d/control: Add qemu-utils to Build-Depends to allow unit tests to run
      qemu-img.
    - CVE-2024-44082

 -- Felipe Reyes <felipe.reyes@canonical.com>  Tue, 03 Sep 2024 16:09:13 +0100

ironic (1:20.1.0-0ubuntu1.1) jammy-security; urgency=medium

  * d/gbp.conf: Create stable/yoga branch.
  * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
    - debian/patches/CVE-2023-2088.patch: Fix Cinder Integration
      fallout from CVE-2023-2088
    - CVE-2023-2088

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 31 May 2023 16:16:26 -0400

ironic (1:20.1.0-0ubuntu1) jammy; urgency=medium

  * d/watch: Scope to 20.x.
  * New upstream release for OpenStack Yoga.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 30 Mar 2022 17:04:02 -0400

ironic (1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/p/skip-test-py310.patch: Skip test for py310 until fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 03 Mar 2022 13:07:06 -0500

ironic (1:19.0.0+git2022011216.7beadee46-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/control: Bump debhelper compat to 13.
  * d/p/fix-mock-objects-as-specs.patch: Dropped. Fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 12 Jan 2022 16:52:05 -0500

ironic (1:18.2.0+git2021120910.cdc3b9538-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/fix-mock-objects-as-specs.patch: Fix mocking errors exposed
    by Python 3.10 unit tests.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 10 Dec 2021 12:45:16 -0500

ironic (1:18.2.0-0ubuntu1) impish; urgency=medium

  * d/watch: Scope to 18.x.
  * New upstream release for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Wed, 06 Oct 2021 15:13:34 +0000

ironic (1:18.1.0+git2021090814.a71ed5de2-0ubuntu1) impish; urgency=medium

  * New upstream release for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Thu, 09 Sep 2021 07:59:55 +0000

ironic (1:18.0.0+git2021072116.c71583fc8-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 21 Jul 2021 16:52:24 -0400

# For older changelog entries, run 'apt-get changelog ironic-common'
