Re: Security question: rh-postgresql10-postgresql-10.6-1
by Sandro Bonazzola
Il giorno dom 23 mag 2021 alle ore 09:25 Greg King <greg.king(a)oracle.com>
ha scritto:
> *Situation:*
>
>
>
> We have a couple customer bugs where the current version of
> rh-postgresql10 is getting flagged in security scans:
>
>
>
> rh-postgresql10-postgresql-10.6-1.el7.x86_64
>
>
>
> We noticed from this Red Hat security advisory that the security problem
> is resolved with this version of the package:
>
>
>
> · Advisory: *https://access.redhat.com/errata/RHSA-2020:5316
> <https://access.redhat.com/errata/RHSA-2020:5316>*
>
> · Package: rh-postgresql10-postgresql-10.15-1.el7.x86_64
>
>
>
> However, oVirt 4.4 still includes 10.6-1 and not 10.15-1
>
Please note oVirt 4.4 is not using PostgreSQL 10, it's using 12. For
instance, 4.4.6 appliance uses:
postgresql-12.5-1.module_el8.4.0+597+7b8b5722.x86_64
postgresql-contrib-12.5-1.module_el8.4.0+597+7b8b5722.x86_64
postgresql-server-12.5-1.module_el8.4.0+597+7b8b5722.x86_64
>
>
> *Question:*
>
>
>
> We need to let customers know why
> rh-postgresql10-postgresql-10.15-1.el7.x86_64 is not included with the
> latest errata release of oVirt 4.4
>
>
>
> Is there an written policy or communication from the community one way or
> the other regarding the security vulnerability resolved with
> rh-postgresql10-postgresql-10.15-1.el7.x86_64? (IE: it was reviewed and
> found not to be applicable, it will be in the next errata release, etc –
> something along those lines)
>
>
>
>
>
> [image: oracle-email-sig-198324-355094]
>
> Gregory King | Software Development Manager | +1.303.272.2427
>
> Oracle Virtualization Sustaining Engineering
>
> 500 Eldorado Boulevard Build 5 | Broomfield Colorado 80021
>
> Mobile: +1.303.968.8169 | Fax: +1.303.272.2427
>
>
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org
> To unsubscribe send an email to devel-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/ND2737GQUTM...
>
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo(a)redhat.com
<https://www.redhat.com/>
*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
<https://mojo.redhat.com/docs/DOC-1199578>*
3 years, 6 months
Failure to run engine-setup for existing development environment
by Eyal Shenitzky
Hi,
When trying to run engine-setup for existing development environment the
following exception thrown -
[engine@dhcp-0-123 ~]$ ovirt-engine/bin/engine-setup
***L:ERROR Internal error: No module named 'distro'
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/otopi/main.py", line 141, in
execute
self.context.loadPlugins()
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 803, in
loadPlugins
self._loadPluginGroups(plugindir, needgroups, loadedgroups)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 112, in
_loadPluginGroups
self._loadPlugins(path, path, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 69, in
_loadPlugins
self._loadPlugins(base, d, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 69, in
_loadPlugins
self._loadPlugins(base, d, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 100, in
_loadPlugins
os.path.basename(path),
File "/usr/lib/python3.6/site-packages/otopi/util.py", line 109, in
loadModule
spec.loader.exec_module(module)
File "<frozen importlib._bootstrap_external>", line 678, in exec_module
File "<frozen importlib._bootstrap>", line 219, in
_call_with_frames_removed
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-checks/ovirt-engine/db/__init__.py",
line 15, in <module>
from . import versions
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-checks/ovirt-engine/db/versions.py",
line 21, in <module>
from ovirt_engine_setup.engine_common import database
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/ovirt_engine_setup/engine_common/database.py",
line 27, in <module>
from ovirt_engine_setup import util as osetuputil
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/ovirt_engine_setup/util.py",
line 18, in <module>
import distro
ModuleNotFoundError: No module named 'distro'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/otopi/__main__.py", line 88, in
main
installer.execute()
File "/usr/lib/python3.6/site-packages/otopi/main.py", line 147, in
execute
sys.exc_info()[2],
File "/usr/lib/python3.6/site-packages/otopi/util.py", line 84, in
raiseExceptionInformation
raise info[1].with_traceback(info[2])
File "/usr/lib/python3.6/site-packages/otopi/main.py", line 141, in
execute
self.context.loadPlugins()
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 803, in
loadPlugins
self._loadPluginGroups(plugindir, needgroups, loadedgroups)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 112, in
_loadPluginGroups
self._loadPlugins(path, path, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 69, in
_loadPlugins
self._loadPlugins(base, d, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 69, in
_loadPlugins
self._loadPlugins(base, d, groupname)
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 100, in
_loadPlugins
os.path.basename(path),
File "/usr/lib/python3.6/site-packages/otopi/util.py", line 109, in
loadModule
spec.loader.exec_module(module)
File "<frozen importlib._bootstrap_external>", line 678, in exec_module
File "<frozen importlib._bootstrap>", line 219, in
_call_with_frames_removed
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-checks/ovirt-engine/db/__init__.py",
line 15, in <module>
from . import versions
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-checks/ovirt-engine/db/versions.py",
line 21, in <module>
from ovirt_engine_setup.engine_common import database
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/ovirt_engine_setup/engine_common/database.py",
line 27, in <module>
from ovirt_engine_setup import util as osetuputil
File
"/home/engine/ovirt-engine/share/ovirt-engine/setup/ovirt_engine_setup/util.py",
line 18, in <module>
import distro
otopi.main.PluginLoadException: No module named 'distro'
Is this a known issue?
--
Regards,
Eyal Shenitzky
3 years, 6 months
Security question: rh-postgresql10-postgresql-10.6-1
by Greg King
Situation:
We have a couple customer bugs where the current version of rh-postgresql10 is getting flagged in security scans:
rh-postgresql10-postgresql-10.6-1.el7.x86_64
We noticed from this Red Hat security advisory that the security problem is resolved with this version of the package:
* Advisory: https://access.redhat.com/errata/RHSA-2020:5316
* Package: rh-postgresql10-postgresql-10.15-1.el7.x86_64
However, oVirt 4.4 still includes 10.6-1 and not 10.15-1
Question:
We need to let customers know why rh-postgresql10-postgresql-10.15-1.el7.x86_64 is not included with the latest errata release of oVirt 4.4
Is there an written policy or communication from the community one way or the other regarding the security vulnerability resolved with rh-postgresql10-postgresql-10.15-1.el7.x86_64? (IE: it was reviewed and found not to be applicable, it will be in the next errata release, etc - something along those lines)
[oracle-email-sig-198324-355094]
Gregory King | Software Development Manager | +1.303.272.2427
Oracle Virtualization Sustaining Engineering
500 Eldorado Boulevard Build 5 | Broomfield Colorado 80021
Mobile: +1.303.968.8169 | Fax: +1.303.272.2427
3 years, 6 months
el8-stream is available in CI
by Ehud Yonasi
Hey everyone,
I wanted to let you know that you can run your patches now on el8-stream.
In order to do that simply add to the stdci yaml file the following section:
distro: el8stream
runtime-requirements:
host-distro: newer
You can also see the example on the patch [1].
The runtime requirements part is due to lack compatibility issues with el7
hosts.
If you see any problems, or have any questions please let me know.
Thanks,
Ehud.
[1]: https://gerrit.ovirt.org/#/c/jenkins/+/114174/6/stdci.yaml
3 years, 6 months
