Skip to content

Q2 2024 yoga security patch #1071

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
May 14, 2024
Merged

Q2 2024 yoga security patch #1071

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
24bf2b8
Bump horizon to fix CVE-2023-31047
seunghun1ee May 14, 2024
67440ee
Bump grafana to fix CVE-2023-49569
seunghun1ee May 14, 2024
76c3d69
Bump prometheus-msteams to fix CVE-2022-40083 and CVE-2021-4238
seunghun1ee May 14, 2024
645b179
Add releasenote for yoga security patch q2 2024
seunghun1ee May 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions etc/kayobe/kolla.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -419,6 +419,13 @@ kolla_build_blocks:
{% set magnum_capi_packages = ['git+https://github.com/stackhpc/[email protected]'] %}
RUN {{ macros.install_pip(magnum_capi_packages | customizable("pip_packages")) }}
{% endraw %}
prometheus_msteams_repository_version: | # Yoga kolla has 1.5.0
{% raw %}
ARG prometheus_msteams_version=1.5.2
ARG prometheus_msteams_sha256sum=0f4df9ee31e655d1ec876ea2c53ab5ae5b07143ef21b9190e61b4d52839e135c
ARG prometheus_msteams_url=https://github.com/prometheus-msteams/prometheus-msteams/releases/download/v${prometheus_msteams_version}/prometheus-msteams-linux-{{debian_arch}}
{% endraw %}

# Dict mapping image customization variable names to their values.
# Each variable takes the form:
# <image name>_<customization>_<operation>
Expand Down
3 changes: 3 additions & 0 deletions etc/kayobe/kolla/globals.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,11 +37,14 @@ kayobe_image_tags:
ubuntu: yoga-20231103T161400

cloudkitty_tag: "{% raw %}{{ kayobe_image_tags['cloudkitty'][kolla_base_distro] }}{% endraw %}"
grafana_tag: yoga-20240510T114335
heat_tag: "{% raw %}{{ kayobe_image_tags['heat'][kolla_base_distro] }}{% endraw %}"
horizon_tag: yoga-20240510T114335
magnum_tag: "{% raw %}{{ kayobe_image_tags['magnum'][kolla_base_distro] }}{% endraw %}"
neutron_tag: "{% raw %}{{ kayobe_image_tags['neutron'][kolla_base_distro] }}{% endraw %}"
nova_tag: "{% raw %}{{ kayobe_image_tags['nova'][kolla_base_distro] }}{% endraw %}"
opensearch_tag: yoga-20231219T221916
prometheus_tag: yoga-20240510T145442

# These overrides are currently redundant, but are kept because it's not obvious that you need them if setting haproxy_tag
glance_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
Expand Down
12 changes: 12 additions & 0 deletions releasenotes/notes/bump-horizon-grafana-prometheus-to-fix-critical-cve-5983cb1d1f6f3ceb.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
---
features:
- |
Bumped Horizon kolla image
Bumped Grafana from 10.1.5-1 to 10.4.2-1 (CentOS & Rocky Linux)
Bumped Grafana from 10.4.1 to 10.4.2 (Ubuntu)
Bumped Prometheus-msteams from 1.5.0 to 1.5.2
security:
- |
Fixed CVE-2023-31047 for Horizon.
Fixed CVE-2023-49569 for Grafana.
Fixed CVE-2022-40083 and CVE-2021-4238 for Prometheus-msteams.
Loading