Kolla Image Build History
This page tracks the history of when Kolla images have been built. Images are built when major security issues are patched in the base image operating system and when changes to OpenStack services, like bug fixes and improvements, are released. OpenStack service changes can be found in the release notes index.
Current OpenStack release
We are currently deploying OpenStack 2026.1 with Ubuntu 24.04 as the base operating system.
Image tagging
When images are built, the date they were built is appended to the image tag, in
the format "YYYY-MM-DD". Images built on October 7, 2026 for the 2026.1 release
will be tagged with 2026.1-ubuntu-noble-2026-10-07. The latest images built
will have two tags applied, one being the base tag (2026.1-ubuntu-noble, for
example), and the other including the appended date. This allows for rolling
back to previous images if necessary.
How to update your cloud
See Update Kolla Images for the steps needed to update your cloud.
OpenStack 2026.1
Latest image tag: 2026.1-ubuntu-noble
Ubuntu 24.04 LTS (Noble) Security updates
See the Ubuntu Security Notices page for information relating to security updates.
OpenStack service updates
OpenStack service changes can be found in the release notes index.
Image Update History
| Tag | Build Date | Services | Notes |
|---|---|---|---|
| 2026.1-ubuntu-noble-2026-10-20 | 10/20/2026 | Mistral | CPU busy loop patched |
| 2026.1-ubuntu-noble-2026-10-19 | 10/19/2026 | Horizon | Image upload issue patched |
| 2026.1-ubuntu-noble-2026-10-07 | 10/07/2026 | Mistral | [OSSA-2026-044] Four authorization and privilege vulnerabilities in Mistral patched |
OpenStack 2023.2
Latest image tag: 2023.2-ubuntu-jammy
Ubuntu 22.04 LTS (Jammy) Security updates
See the Ubuntu Security Notices page for information relating to security updates.
OpenStack service updates
OpenStack service changes can be found in the release notes index.
Image Update History
OpenStack Yoga
Latest image tag: yoga
Image Update History
| Tag | Build Date | Services | Notes |
|---|---|---|---|
| yoga-2026-10-07 | 10/07/2026 | Mistral | [OSSA-2026-044] Four authorization and privilege vulnerabilities in Mistral patched via backport |
| yoga-2026-09-08 | 09/08/2026 | Glance | [OSSA-2026-038] Multiple SSRF vulnerabilities in Glance web-download and HTTP image APIs patched |
| yoga-2026-06-18 | 06/18/2026 | Nova | [OSSA-2026-022] Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints |
| yoga-2026-05-29 | 05/29/2026 | Keystone | [OSSA-2026-015] Keystone credential delegation project boundary enforcement patched |
| yoga-2026-03-24 | 03/24/2026 | Glance | [OSSA-2026-004] Server-Side Request Forgery (SSRF) vulnerabilities in OpenStack Glance image import functionality patched |
| Nova | [OSSA-2026-002] Nova calls qemu-img without format restrictions for resize (CVE-2026-24708) patched | ||
| yoga-2025-11-05 | 11/05/2025 | Keystone | ec2tokens and s3tokens endpoint vulnerability patched |