Merge pull request #1272 from stackhpc/fix-cve-2024-42005

seunghun1ee · web-flow · commit 0fb3cbc22a05 · 2024-09-10T07:54:30.000+01:00
Bump horizon to fix cve-2024-42005 (Caracal)
diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
@@ -9,6 +9,9 @@ kolla_image_tags:
   heat:
     rocky-9: 2024.1-rocky-9-20240805T142526
     ubuntu-jammy: 2024.1-ubuntu-jammy-20240805T142526
+  horizon:
+    rocky-9: 2024.1-rocky-9-20240909T144917
+    ubuntu-jammy: 2024.1-ubuntu-jammy-20240909T144917
   bifrost_deploy:
     rocky-9: 2024.1-rocky-9-20240725T165045
   prometheus:
diff --git a/releasenotes/notes/bump-horizon-dae0cd4cfffe7d7e.yaml b/releasenotes/notes/bump-horizon-dae0cd4cfffe7d7e.yaml
@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    Updated Horizon Kolla image to fix `CVE-2024-42005
+    <https://nvd.nist.gov/vuln/detail/CVE-2024-42005>`_
