Bug 2237863
Summary: | Include at ODF 4.12 container images the RHEL CVE fix on "subscription-manager" | ||
---|---|---|---|
Product: | [Red Hat Storage] Red Hat OpenShift Data Foundation | Reporter: | Rejy M Cyriac <rcyriac> |
Component: | distribution | Assignee: | Mudit Agarwal <muagarwa> |
Status: | CLOSED ERRATA | QA Contact: | Petr Balogh <pbalogh> |
Severity: | high | Docs Contact: | |
Priority: | unspecified | ||
Version: | 4.12 | CC: | dkhandel, jopinto, kramdoss, odf-bz-bot, pbalogh |
Target Milestone: | --- | Keywords: | ZStream |
Target Release: | ODF 4.12.8 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2023-09-27 14:48:44 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Rejy M Cyriac
2023-09-07 11:24:48 UTC
Containers having greater version of subscription-manager 1.29.26.2-2 is required, whereas with ODF 4.12.8 its still showing 1.28.36-3.el8_8.x86_64. Hence marking the bug as failedQA OCP version:4.12.0-0.nightly-2023-09-12-091728 ODF version:4.12.8 odf-console-6579d5869c-8wtsv: sh-4.4$ rpm -qa|grep subsc subscription-manager-1.28.36-3.el8_8.x86_64 subscription-manager-rhsm-certificates-1.28.36-3.el8_8.x86_64 python3-subscription-manager-rhsm-1.28.36-3.el8_8.x86_64 dnf-plugin-subscription-manager-1.28.36-3.el8_8.x86_64 sh-4.4$ csi-cephfsplugin-49gth sh-4.4# rpm -qa|grep sub subscription-manager-rhsm-certificates-1.28.29.1-2.el8_6.x86_64 dnf-plugin-subscription-manager-1.28.29.1-2.el8_6.x86_64 python3-subscription-manager-rhsm-1.28.29.1-2.el8_6.x86_64 subscription-manager-1.28.29.1-2.el8_6.x86_64 sh-4.4# noobaa-core-0 sh-4.4$ rpm -qa|grep subsc subscription-manager-1.28.36-3.el8_8.x86_64 subscription-manager-rhsm-certificates-1.28.36-3.el8_8.x86_64 python3-subscription-manager-rhsm-1.28.36-3.el8_8.x86_64 dnf-plugin-subscription-manager-1.28.36-3.el8_8.x86_64 sh-4.4$ ODF 4.12.8 is based on RHEL8. As per this bz https://bugzilla.redhat.com/show_bug.cgi?id=2225407, I see two security updates https://access.redhat.com/errata/RHSA-2023:4705(extended update support) and https://access.redhat.com/errata/RHSA-2023:4706 which points to the updated package version `1.28.29.1-2.el8_6.src.rpm` (eg, subscription-manager-1.28.29.1-2.el8_6.src.rpm). I see the correct version in the above list for RHEL8 based container images. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenShift Data Foundation 4.12.8 Bug Fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:5377 |