Merge pull request #2248 from stackhpc/bump-keystone-antelope

priteau · web-flow · commit 17ccc89257f3 · 2026-04-07T17:10:09.000+02:00
Bump Keystone images to fix CVE-2026-33551 (Antelope)
diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
@@ -28,8 +28,8 @@ kolla_image_tags:
     rocky-9: 2023.1-rocky-9-20241022T090717
     ubuntu-jammy: 2023.1-ubuntu-jammy-20241022T090717
   keystone:
-    rocky-9: 2023.1-rocky-9-20251031T100336
-    ubuntu-jammy: 2023.1-ubuntu-jammy-20251031T100336
+    rocky-9: 2023.1-rocky-9-20260331T144850
+    ubuntu-jammy: 2023.1-ubuntu-jammy-20260331T144850
   kolla_toolbox:
     rocky-9: 2023.1-rocky-9-20250321T110513
   letsencrypt:
diff --git a/releasenotes/notes/fix-cve-2026-33551-2919ef42eaed74f2.yaml b/releasenotes/notes/fix-cve-2026-33551-2919ef42eaed74f2.yaml
@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    Fixes `CVE-2026-33551 <https://bugs.launchpad.net/swift/+bug/2142138>`__
+    with updated Keystone images
