We are thrilled to announce the release of: ironic-inspector 8.0.3: Hardware introspection for OpenStack Bare Metal This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.0.3 ^^^^^ Security Issues *************** * Fixes insufficient input filtering when looking up a node by information from the introspection data. It could potentially allow SQL injections via the "/v1/continue" API endpoint. See story 2005678 (https://storyboard.openstack.org/#!/story/2005678) for details. Bug Fixes ********* * Fix starting inspection of node having IPv6 BMC address. Inspection could not be initiated because v6 address was being considered as a hostname. Thus resolving incorrect hostname ended up with blocking error. Changes in ironic-inspector 8.0.2..8.0.3 ---------------------------------------- 97f9d34 Eliminate SQL injection vulnerability in node_cache f73967f OpenDev Migration Patch de754cc Replace openstack.org git:// URLs with https:// f66e207 Fix lookup when ipmi_address is a hostname 40abe1b Use getaddrinfo instead of gethostbyname while resolving BMC address Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ironic_inspector/common/ironic.py | 37 +++++++++++---- ironic_inspector/introspect.py | 5 +- ironic_inspector/node_cache.py | 15 +++--- ironic_inspector/plugins/discovery.py | 3 +- ironic_inspector/test/unit/test_common_ironic.py | 53 ++++++++++++++-------- ironic_inspector/test/unit/test_introspect.py | 45 ++++++++++++++---- ironic_inspector/test/unit/test_node_cache.py | 5 ++ .../legacy/ironic-inspector-grenade-dsvm/run.yaml | 18 ++++---- .../run.yaml | 12 ++--- .../ironic-inspector-tempest-dsvm-python3/run.yaml | 10 ++-- ...find-node-input-filtering-e8ea529252e80739.yaml | 7 +++ ...-address-start-inspection-7a72794f25eb9f19.yaml | 7 +++ zuul.d/legacy-ironic-inspector-jobs.yaml | 4 +- 14 files changed, 154 insertions(+), 69 deletions(-)