RHBA-2017:1512 - Bug Fix Advisory

Topic

Updated cns-deploy-tool packages that fixes a bug is now available.

Description

The 'cns-deploy' utility provides a tool to deploy Container-Native Storage
on the Openshift environment.

An updated rhgs3/rhgs-server-rhel7 and rhgs3/rhgs-volmanager-rhel7 Container images has been made available to include the glibc, sudo, and nss packages from Red Hat Enterprise Linux 7 with fixes for CVE-2017-1000366, CVE-2017-1000364, CVE-2017-7502 and CVE-2017-1000367.

Since the cns-deploy template files points to the rhgs3/rhgs-server-rhel7 and rhgs3/rhgs-volmanager-rhel7 image, cns-deploy package have been updated to include the new build tag of the rhgs3/rhgs-server-rhel7 and rhgs3/rhgs-volmanager-rhel7 Container images. This has the glibc, sudo, and nss packages from Red Hat Enterprise Linux 7 with fixes for CVE-2017-1000366, CVE-2017-1000364, CVE-2017-7502 and CVE-2017-1000367. (BZ#1460674).

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64

Fixes

• BZ - 1460674 - Update the rhgs image tag which has the CVE fix glibc, nss and sudo.

CVEs

(none)

References

• https://errata.devel.redhat.com/advisory/28714
• https://errata.devel.redhat.com/advisory/28767
• https://access.redhat.com/security/cve/CVE-2017-7502
• https://access.redhat.com/security/cve/CVE-2017-1000367