Bug 1460946

Summary:	latest rhscl/ruby-23-rhel7 missing fix for NSS issue
Product:	Red Hat Software Collections	Reporter:	Lutz Lange <llange>
Component:	rh-ruby23-container	Assignee:	Honza Horak <hhorak>
Status:	CLOSED DUPLICATE	QA Contact:	BaseOS QE - Apps <qe-baseos-apps>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	rh-ruby23	CC:	hhorak, jorton
Target Milestone:	alpha
Target Release:	3.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-06-23 07:58:31 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Lutz Lange 2017-06-13 08:38:00 UTC

Description of problem:
release 6.7 and release 6.8 of the rhscl/ruby-23-rhel7 container image have nss issues. There is a Red Hat Advisory : RHSA-2017:1365 the issue is with CVE-2017-7502. There is an updated nss out since 30-May-17.

See also : https://access.redhat.com/containers/#/registry.access.redhat.com/rhscl/ruby-23-rhel7/images/2.3-6.7

https://access.redhat.com/errata/RHSA-2017:1365


Version-Release number of selected component (if applicable):
rhscl/ruby-23-rhel7:6.7
rhscl/ruby-23-rhel7:6.8

Expected results:
We need a container image that has this fix in.
Please build a new version of rhscl/ruby-23-rhel7 that has the fix.

Comment 3 Joe Orton 2017-06-23 07:58:31 UTC


*** This bug has been marked as a duplicate of bug 1461746 ***