Important: Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-ironic) security update

An update for openstack-ironic is now available for Red Hat OpenStack Services on OpenShift 18.0 Antelope. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

DEBIAN-CVE-2026-42997

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token which provides access to all OpenStack services Ironic is authorized for; o...

CVE-2026-42997

creationtimestamp| type| source ---|---|--- 2026-05-05 17:59:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4ratvmfr2j 2026-05-05 19:17:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vnfpglw2w 2026-05-05 20:35:31+00:00| seen|...

CVE-2026-42997

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token which provides access to all OpenStack services Ironic is authorized for; o...