On 06/11/2018 05:55 PM, Kraus, Dave (GE Healthcare) wrote:
> On 6/11/18, 5:21 PM, "[log in to unmask] on behalf of Akemi Yagi" <[log in to unmask] on behalf of [log in to unmask]> wrote:
>
>      On Mon, Jun 11, 2018 at 2:15 PM, Kraus, Dave (GE Healthcare)
>      <[log in to unmask]> wrote:
>      > We seem to be missing at least a couple glusterfs package updates in SL compared to TUV’s security update notification.
>      >
>      > From what I can tell, at least the last couple updates for 6 and 7 have not come through from SL for either the clients or the server sides:
>      >
>      > For CVE-2018-1088:
>      >    RHSA-2018:1136 (for SL7)
>      >    RHSA-2018:1137 (for SL6)
>      >
>      > For CVE-2018-1112
>      >    RHSA-2018:1268 (for SL6)
>      >    RHSA-2018:1269 (for SL7)
>      >
>      > Might want to take a look and see what's going on (or tell me why I'm mistaken, which is more likely...).
>      
>      glusterfs-3.8.4-53.el7 is the latest version available through the
>      regular channel. The newer versions you referenced are available from
>      the RH channel "rh-gluster-3-client-for-rhel-7-server-rpms" but the
>      source code is not available through git.centos.org.
>      
>      You can install and use a newer release of the glusterfs packages
>      maintained by the CentOS Storage SIG. The details are here:
>      
>      https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.centos.org_SpecialInterestGroup_Storage_gluster-2DQuickstart&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=AF0j943UOEKqV3Y_S-26i7jfIKEhjQ_znha9xwWHTVc&s=LiW5DD1Y4QqqU030B-U067cg6QigKpi2qOezplDj4Gg&e=
>      
>      Akemi
>      
> In theory there is a glusterfs-3.8.4-54.9 source package available for Red Hat Enterprise Linux Server 6 x86_64. Not sure if SL is pulling from Server or not at this point. (https://urldefense.proofpoint.com/v2/url?u=https-3A__access.redhat.com_errata_RHSA-2D2018-3A1268&d=DwIGaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=AF0j943UOEKqV3Y_S-26i7jfIKEhjQ_znha9xwWHTVc&s=nS72XFFvkZeLkRAjHP6XZ8ZCCPtAi_YlmhmJ0R9bAZI&e= under the Updated Packages tab.)
>
> As I notice, it's in the Server tree. Was just wondering if it got missed somehow.
>

I'm not showing that version in 
http://ftp.redhat.com/redhat/linux/enterprise/6Server/en/os/SRPMS/

Where did you find it?

-- 
Pat Riehecky

Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org