ironic (1:24.1.1-0ubuntu1.3) noble-security; urgency=medium

  * SECURITY UPDATE: sanitize kernel_append_params to prevent injection
    - d/p/cve-2026-46447-sanitize-kernel-append-params.patch: Validate
      kernel_append_params against a kernel command line grammar and
      reject malformed parameters. Add disable_kernel_parameter_parsing
      config option.
    - CVE-2026-46447
  * SECURITY UPDATE: disable insecure driver_info pxe_template override
    - d/p/lp2148319-disable-pxe-template-override.patch: Remove direct
      file path support for pxe_template to prevent privilege escalation.
    - CVE-2026-44917
  * SECURITY UPDATE: prevent directory traversal in ISO9660 image handling
    - d/p/lp2148333-directory-traversal-iso9660.patch: Validate ISO9660
      path entries to reject directory traversal attempts in config drive
      ISO images.
    - CVE-2026-48681

 -- Hemanth Nakkina <hemanth.nakkina@canonical.com>  Wed, 03 Jun 2026 14:49:43 +0530

ironic (1:24.1.1-0ubuntu1.2) noble-security; urgency=medium

  * SECURITY UPDATE: ensure underlying environment details not leaked when a
    maliciously crafted image is used (LP: #2071740).
    - d/p/CVE-2024-44082.patch: Harden all image handling and conversion code.
    - d/control: Add qemu-utils to Build-Depends to allow unit tests to run
      qemu-img.
    - CVE-2024-44082

 -- Felipe Reyes <felipe.reyes@canonical.com>  Tue, 03 Sep 2024 16:06:12 +0100

ironic (1:24.1.1-0ubuntu1.1) noble; urgency=medium

  [ James Page ]
  * d/gbp.conf: Create stable/2024.1 branch.
  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    caracal.

  [ Felipe Reyes ]
  * d/p/install-missing-files.patch: Install all data files under the ironic/
    directory (LP: #2073643).
  * d/p/install-missing-db-files.patch: Dropped in favor of
    d/p/install-missing-files.patch.

 -- Felipe Reyes <felipe.reyes@canonical.com>  Fri, 26 Jul 2024 15:50:11 +0100

ironic (1:24.1.1-0ubuntu1) noble; urgency=medium

  * New upstream release for OpenStack Caracal.

 -- James Page <james.page@ubuntu.com>  Fri, 05 Apr 2024 14:17:19 +0100

ironic (1:24.1.0-0ubuntu1) noble; urgency=medium

  [ Luciano Lo Giudice ]
  * New upstream release for OpenStack Caracal.

  [ James Page ]
  * d/watch: Track Caracal releases.

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Wed, 20 Mar 2024 09:09:31 +0000

ironic (1:23.1.0+git2024011916.a374a0c1-0ubuntu1) noble; urgency=medium

  [ Corey Bryant ]
  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    caracal.

  [ James Page ]
  * New upstream snapshot for OpenStack Caracal.
  * d/control: Align (Build-)Depends with upstream.

 -- James Page <james.page@ubuntu.com>  Tue, 23 Jan 2024 20:13:55 +0000

ironic (1:23.0.0-0ubuntu3) mantic; urgency=medium

  * d/control: Revert back to python3-pysnmp4 (Build-)Depends
    to prevent dependency conflicts in Mantic (LP: #2039055).

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 11 Oct 2023 09:44:41 -0400

ironic (1:23.0.0-0ubuntu2) mantic; urgency=medium

  * d/control: BD on latest python3-scciclient to fix autopkgtest failures.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 06 Oct 2023 14:10:34 -0400

ironic (1:23.0.0-0ubuntu1) mantic; urgency=medium

  * d/watch: Drop major version.
  * New upstream release for OpenStack Bobcat.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 04 Oct 2023 10:27:14 -0400

ironic (1:22.1.0+git2023090714.985c7fdf-0ubuntu1) mantic; urgency=medium

  * New upstream snapshot for OpenStack Bobcat.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/install-missing-db-files.patch: Install missing db files, including
    ironic/db/sqlalchemy/alembic.ini.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 07 Sep 2023 14:20:03 -0400

ironic (1:22.0.0+git2023071214.416ea871-0ubuntu1) mantic; urgency=medium

  * New upstream snapshot for OpenStack Bobcat.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 12 Jul 2023 14:23:50 -0400

ironic (1:22.0.0+git2023061415.ce1abd40-0ubuntu1) mantic; urgency=medium

  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    bobcat.
  * New upstream snapshot for OpenStack Bobcat.
  * d/p/CVE-2023-2088.patch: Dropped. Fixed in snapshot.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 14 Jun 2023 15:02:38 -0400

ironic (1:21.4.0-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
    - debian/patches/CVE-2023-2088.patch: Fix Cinder Integration
      fallout from CVE-2023-2088
    - CVE-2023-2088

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 31 May 2023 14:42:54 -0400

ironic (1:21.4.0-0ubuntu1) lunar; urgency=medium

  * New upstream release for OpenStack Antelope.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 24 Mar 2023 08:52:23 -0400

ironic (1:21.3.0-0ubuntu1) lunar; urgency=medium

  * New upstream release for OpenStack Antelope.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 27 Feb 2023 16:50:39 -0500

ironic (1:21.2.0+git2023011311.895ba325-0ubuntu1) lunar; urgency=medium

  * New upstream snapshot for OpenStack Antelope.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/skip-test-py310.patch: Dropped. Fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 13 Jan 2023 11:11:54 -0500

ironic (1:21.1.0-0ubuntu1) kinetic; urgency=medium

  * d/watch: Scope to 21.x.
  * New upstream release for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 05 Oct 2022 14:53:09 -0400

ironic (1:21.0.0+git2022091212.a171e588f-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Mon, 12 Sep 2022 12:53:32 -0400

ironic (1:20.2.0+git2022071414.0c4401cfb-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.
  * d/control: Ensure openstack-pkg-tools has CIS hardening for log files
    and pkgos_adduser.
  * d/ironic-common.postinst: CIS hardening update to switch adduser to use
    /usr/sbin/nologin when creating system account that does not run a shell.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 14 Jul 2022 14:07:21 -0400

ironic (1:20.2.0+git2022060209.34afea3af-0ubuntu1) kinetic; urgency=medium

  * New upstream snapshot for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.
  * d/control: Update standards version to 4.6.1.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 02 Jun 2022 09:53:55 -0400

ironic (1:20.1.0-0ubuntu1) jammy; urgency=medium

  * d/watch: Scope to 20.x.
  * New upstream release for OpenStack Yoga.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 30 Mar 2022 17:04:02 -0400

ironic (1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/p/skip-test-py310.patch: Skip test for py310 until fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 03 Mar 2022 13:07:06 -0500

ironic (1:19.0.0+git2022011216.7beadee46-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/control: Bump debhelper compat to 13.
  * d/p/fix-mock-objects-as-specs.patch: Dropped. Fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 12 Jan 2022 16:52:05 -0500

ironic (1:18.2.0+git2021120910.cdc3b9538-0ubuntu1) jammy; urgency=medium

  * New upstream snapshot for OpenStack Yoga.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/fix-mock-objects-as-specs.patch: Fix mocking errors exposed
    by Python 3.10 unit tests.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 10 Dec 2021 12:45:16 -0500

ironic (1:18.2.0-0ubuntu1) impish; urgency=medium

  * d/watch: Scope to 18.x.
  * New upstream release for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Wed, 06 Oct 2021 15:13:34 +0000

ironic (1:18.1.0+git2021090814.a71ed5de2-0ubuntu1) impish; urgency=medium

  * New upstream release for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Thu, 09 Sep 2021 07:59:55 +0000

ironic (1:18.0.0+git2021072116.c71583fc8-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 21 Jul 2021 16:52:24 -0400

ironic (1:18.0.0+git2021061112.1e2fa5c32-0ubuntu1) impish; urgency=medium

  * New upstream snapshot for OpenStack Xena.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Fri, 11 Jun 2021 12:51:28 +0000

ironic (1:17.0.1-0ubuntu1) hirsute; urgency=medium

  * d/watch: Scope to 17.x series.
  * New upstream release for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 13 Apr 2021 13:57:02 -0400

ironic (1:16.2.0-0ubuntu1) hirsute; urgency=medium

  * New upstream release OpenStack Wallaby.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 24 Mar 2021 14:41:29 -0400

ironic (1:16.1.0+git2021012507.4af9e4985-0ubuntu1) hirsute; urgency=medium

  [ Corey Bryant ]
  * d/rules: Override Python 3 shebang.

  [ Chris MacNaughton ]
  * New upstream snapshot for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Mon, 25 Jan 2021 08:05:21 +0000

ironic (1:16.0.2+git2020120911.42bf964c8-0ubuntu1) hirsute; urgency=medium

  * New upstream snapshot for OpenStack Wallaby.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Wed, 09 Dec 2020 11:58:36 -0500

ironic (1:16.0.1-0ubuntu1) groovy; urgency=medium

  * d/control: Update VCS paths for move to lp:~ubuntu-openstack-dev.
  * d/watch: Scope to 16.x series.
  * New upstream release for OpenStack Victoria.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Thu, 15 Oct 2020 13:27:13 +0000

ironic (1:16.0.0~b3~git2020091407.235506b00-0ubuntu1) groovy; urgency=medium

  * New upstream snapshot for OpenStack Victoria.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@canonical.com>  Mon, 14 Sep 2020 07:11:40 +0000

ironic (1:16.0.0~b2~git2020073106.5176f98ef-0ubuntu1) groovy; urgency=medium

  * New upstream snapshot for OpenStack Victoria.
  * d/control: Align (Build-)Depends with upstream.

 -- Chris MacNaughton <chris.macnaughton@canonical.com>  Fri, 31 Jul 2020 06:27:25 +0000

ironic (1:16.0.0~b1~git2020070209.ab358e0b1-0ubuntu1) groovy; urgency=medium

  * New upstream snapshot for OpenStack Victoria.
  * d/control: Align (Build-)Depends with upstream.
  * d/p/monkey-patch-original-current-thread.patch: Dropped. Fixed upstream.
  * d/p/skip-py3-failure.patch: Dropped. Fixed upstream.
  * d/control: Update Standards-Version to 4.5.0.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 02 Jul 2020 09:25:56 -0400

ironic (1:15.0.0-0ubuntu1) groovy; urgency=medium

  * New upstream release for OpenStack Ussuri (LP: #1877642).
  * d/control: Align (Build-)Depends with upstream.
  * d/p/monkey-patch-original-current-thread.patch: Cherry-picked from
    https://review.opendev.org/#/c/725857. This fixes neutron service failures
    with Python 3.8 (LP: #1863021).

 -- Chris MacNaughton <chris.macnaughton@canonical.com>  Wed, 13 May 2020 07:35:17 +0000

ironic (1:14.0.1~git2020041013.af9e6ba90-0ubuntu2) focal; urgency=medium

  * d/tests/ironic-daemons: increase sleep time between API http checks
    to allow more time for service to start, avoiding races on slower
    architectures.

 -- James Page <james.page@ubuntu.com>  Fri, 17 Apr 2020 09:57:51 +0100

ironic (1:14.0.1~git2020041013.af9e6ba90-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/ironic-common.postinst: Set ownership and permissions for all /var/lib
    files and directories.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 10 Apr 2020 13:07:22 -0400

ironic (1:14.0.1~git2020032415.de2d907fc-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/control: Align (Build-)Depends with upstream.
  * d/ironic-common.postinst: Set default ownership and permissions for
    /etc/<pkg>, /var/lib/<pkg>, and /var/log/<pkg> (LP: #1859422).

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 24 Mar 2020 15:12:51 -0400

ironic (1:14.0.0-0ubuntu1) focal; urgency=medium

  * New upstream release for OpenStack Ussuri.

 -- Corey Bryant <corey.bryant@canonical.com>  Fri, 14 Feb 2020 12:17:57 -0500

ironic (1:14.0.0~b1~git2019121713.76597ca93-0ubuntu2) focal; urgency=medium

  * d/tests/control,ironic-daemons: Use MySQL for autopkgtest tests.

 -- James Page <james.page@ubuntu.com>  Tue, 11 Feb 2020 11:31:04 +0000

ironic (1:14.0.0~b1~git2019121713.76597ca93-0ubuntu1) focal; urgency=medium

  * New upstream snapshot for OpenStack Ussuri.
  * d/control: Align (Build-)Depends with upstream.
  * d/control, d/rules, d/compat, d/ironic-common.install: Switch to
    debhelper compat 12 and pybuild.
  * d/rules: Update PBR_VERSION to handle ~git versioning.
  * d/p/skip-py3-failure.patch: Skip py37/38 failure until fixed upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Tue, 17 Dec 2019 13:18:26 -0500

ironic (1:13.0.1-0ubuntu1) eoan; urgency=medium

  * New upstream release for OpenStack Train.

 -- James Page <james.page@ubuntu.com>  Fri, 11 Oct 2019 10:22:35 +0100

ironic (1:13.0.0-0ubuntu1) eoan; urgency=medium

  [ Sahid Orentino Ferdjaoui ]
  * New upstream snapshot for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

  [ Corey Bryant ]
  * New upstream release for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 26 Sep 2019 15:11:46 -0400

ironic (1:12.2.1~b2~git2019080812.b8db11279-0ubuntu1) eoan; urgency=medium

  [ Sahid Orentino Ferdjaoui ]
  * New upstream snapshot for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

  [ Corey Bryant ]
  * d/control: Stick with python3-sphinxcontrib-pecanwsme >= 0.8.0 for now.
    The upstream commit for ironic mentions the bump to 0.10.0 was for sphinx
    2.0 and eoan is not there yet.
  * New upstream snapshot for OpenStack Train.

 -- Corey Bryant <corey.bryant@canonical.com>  Thu, 08 Aug 2019 12:39:39 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog ironic-common`.
