Fedora Account System
Red Hat Associate
Red Hat Customer
Red Hat Ceph Storage 4.1 has shipped fix to 'Important' CVE at Ceph = RHSA-2020:2231 - Security Advisory == https://access.redhat.com/errata/RHSA-2020:2231 = CVE-2020-1716 == https://access.redhat.com/security/cve/CVE-2020-1716 This fix to 'Important' CVE at Ceph is to be included at OCS 4 through update to Red Hat Ceph Storage container image 4.1
The latest build is this: 4.4.1-459.ci https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/OCS%20Build%20Pipeline%204.4/61/ https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/OCS%20Build%20Pipeline%204.4/61/artifact/image_versions.json How can we tell whether this contains the cve fix?
According to confirmation by Boris in chat, the ceph build in this is the RHCS 4.1 GA build and contains this fix.
(In reply to Michael Adam from comment #1) > The latest build is this: > > 4.4.1-459.ci > https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/ > OCS%20Build%20Pipeline%204.4/61/ > https://ceph-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/ > OCS%20Build%20Pipeline%204.4/61/artifact/image_versions.json > > > How can we tell whether this contains the cve fix? Hi Michael, based on that, can we move the bug to VERIFIED?
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2830