Merge pull request #2246 from stackhpc/bump-keystone-epoxy

priteau · web-flow · commit 7741cad681a8 · 2026-04-07T17:09:29.000+02:00
Bump Keystone images to fix CVE-2026-33551 (Epoxy)
diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
@@ -20,6 +20,9 @@ kolla_image_tags:
   ironic_neutron_agent:
     rocky-9: 2025.1-rocky-9-20260205T152450
     ubuntu-noble: 2025.1-ubuntu-noble-20260205T152450
+  keystone:
+    rocky-9: 2025.1-rocky-9-20260331T124655
+    ubuntu-noble: 2025.1-ubuntu-noble-20260331T124655
   neutron:
     rocky-9: 2025.1-rocky-9-20260403T083425
     ubuntu-noble: 2025.1-ubuntu-noble-20260403T083425
diff --git a/releasenotes/notes/fix-cve-2026-33551-2c10ea356fd42b37.yaml b/releasenotes/notes/fix-cve-2026-33551-2c10ea356fd42b37.yaml
@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    Fixes `CVE-2026-33551 <https://bugs.launchpad.net/swift/+bug/2142138>`__
+    with updated Keystone images
