Bug 1849159
| Summary: | Include CVE fix at Ceph through update to Red Hat Ceph Storage container image 4.1 | ||
|---|---|---|---|
| Product: | [Red Hat Storage] Red Hat OpenShift Container Storage | Reporter: | Rejy M Cyriac <rcyriac> |
| Component: | distribution | Assignee: | Michael Adam <madam> |
| Status: | CLOSED ERRATA | QA Contact: | Raz Tamir <ratamir> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 4.4 | CC: | aeyal, bniver, ebenahar, gmeno, madam, nberry, ocs-bugs, sostapov, ykaul |
| Target Milestone: | --- | ||
| Target Release: | OCS 4.4.1 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
The fix to the following 'Important' CVE on Ceph shipped at Red Hat Ceph Storage 4.1 is to be included at OCS 4 through update to Red Hat Ceph Storage container image 4.1
= CVE-2020-1716
== https://access.redhat.com/security/cve/CVE-2020-1716
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-07-07 06:10:29 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Rejy M Cyriac
2020-06-19 17:52:58 UTC
The latest build is this: 4.4.1-459.ci https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/OCS%20Build%20Pipeline%204.4/61/ https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/OCS%20Build%20Pipeline%204.4/61/artifact/image_versions.json How can we tell whether this contains the cve fix? According to confirmation by Boris in chat, the ceph build in this is the RHCS 4.1 GA build and contains this fix. (In reply to Michael Adam from comment #1) > The latest build is this: > > 4.4.1-459.ci > https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/ > OCS%20Build%20Pipeline%204.4/61/ > https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/ > OCS%20Build%20Pipeline%204.4/61/artifact/image_versions.json > > > How can we tell whether this contains the cve fix? Hi Michael, based on that, can we move the bug to VERIFIED? Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2830 |