CVE-2021-28235 updates

Bug #2023602 reported by Mark Esler
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Etcd Snaps
Fix Released
High
Kevin W Monroe

Bug Description

Please update all affected release channels of etcd-snaps with CVE-2021-28235 security patches.

https://ubuntu.com/security/CVE-2021-28235

Mark Esler (eslerm)
information type: Private Security → Public Security
Revision history for this message
Kevin W Monroe (kwmonroe) wrote (last edit ):

ack, this is due to a lack of promotion for the latest track. The 3.4 track has been updated and proven solid for charmed kubernetes (which uses 3.4/stable) for a while now.

channels:
  latest/stable: 3.4.5 2020-06-05 (230) 22MB -
  latest/candidate: 3.4.22 2023-04-14 (233) 22MB -
  latest/beta: 3.4.22 2023-04-14 (233) 22MB -
  latest/edge: 3.4.22 2022-12-12 (233) 22MB -
  3.4/stable: 3.4.22 2023-01-12 (233) 22MB -
  3.4/candidate: 3.4.22 2023-01-12 (233) 22MB -
  3.4/beta: 3.4.22 2023-01-12 (233) 22MB -
  3.4/edge: 3.4.22 2022-12-12 (233) 22MB -

This will likely be covered by a simple promo, but I'll confirm with a ck8s upgrade from stable -> candidate first.

Changed in etcd-snaps:
status: New → In Progress
importance: Undecided → High
assignee: nobody → Kevin W Monroe (kwmonroe)
milestone: none → 1.28
Revision history for this message
Kevin W Monroe (kwmonroe) wrote :

latest/candidate (3.4.22) has been promoted to latest/stable, which matches the 3.4/$risk channels.

Changed in etcd-snaps:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.