Bug 1922970 - Update to Red Hat Ceph Storage (RHCS) 4.2.z Ceph container image, to include RHCS 4.2 fixes to 'Important' CVEs, and to include "sudo" RHEL CVE fix at Ceph
Summary: Update to Red Hat Ceph Storage (RHCS) 4.2.z Ceph container image, to include ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenShift Container Storage
Classification: Red Hat Storage
Component: distribution
Version: 4.6
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: OCS 4.6.3
Assignee: Boris Ranto
QA Contact: Raz Tamir
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-02-01 08:32 UTC by Rejy M Cyriac
Modified: 2021-03-03 22:53 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
OpenShift Container Storage 4.6 is updated to Ceph 4.2.z Container image which includes fixes to CVEs at Red Hat Ceph Storage 4.2. It also includes the fix to CVE on sudo at Red Hat Enterprise Linux 8.
Clone Of:
Environment:
Last Closed: 2021-03-03 22:53:23 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:0718 0 None None None 2021-03-03 22:53:32 UTC

Description Rejy M Cyriac 2021-02-01 08:32:24 UTC 
Red Hat Ceph Storage (RHCS) 4.2 has shipped fixes to two 'Important' CVEs and one 'Moderate' CVE at Ceph


= RHSA-2021:0083 - Security Advisory
  == https://access.redhat.com/errata/RHSA-2021:0083


= CVE-2020-1971
  == https://access.redhat.com/security/cve/CVE-2020-1971
  == Important Impact

= CVE-2020-13379
  == https://access.redhat.com/security/cve/CVE-2020-13379
  == Important Impact

= CVE-2020-24659
  == https://access.redhat.com/security/cve/CVE-2020-24659
  == Moderate Impact


= Impacted OCS 4.x Container images
  == Ceph CSI
  == Rook Ceph Operator 


The fixes to the CVEs at RHCS 4.2 are to be included at OCS through update of the associated OCS container images to Red Hat Ceph Storage 4.2 or higher
Comment 13 errata-xmlrpc 2021-03-03 22:53:23 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenShift Container Storage 4.6.3 container bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:0718
Note You need to log in before you can comment on or make changes to this bug.