Re: Important security noticed regarding release signing key

[wangsongbo <songbo1227-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>]

[-- Attachment #1.1: Type: text/plain, Size: 1579 bytes --]

Hi  Ken,
     Just now, I run teuthology-suites in our testing, it failed because 
of lacking these packages, such as 
qemu-kvm-0.12.1.2-2.415.el6.3ceph.x86_64, 
qemu-kvm-tools-0.12.1.2-2.415.el6.3ceph etc.
     The modify " rm ceph-extras repository config#137" remove the 
repository , but did not solve the ansible's dependence.

     How to solve this dependence ?

Thanks and Regards,
WangSongbo

On 15/9/23 上午10:50, Ken Dreyer wrote:
> Hi Songbo, It's been removed from Ansible now:
> https://github.com/ceph/ceph-cm-ansible/pull/137
>
> - Ken
>
> On Tue, Sep 22, 2015 at 8:33 PM, wangsongbo <songbo1227-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>> Hi Ken,
>>      Thanks for your reply. But in the ceph-cm-ansible project scheduled by
>> teuthology, "ceph.com/packages/ceph-extras" is in used now, such as
>> qemu-kvm-0.12.1.2-2.415.el6.3ceph, qemu-kvm-tools-0.12.1.2-2.415.el6.3ceph
>> etc.
>>      Any new releases will be provided ?
>>
>>
>> On 15/9/22 下午10:24, Ken Dreyer wrote:
>>> On Tue, Sep 22, 2015 at 2:38 AM, Songbo Wang <songbo1227-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>>>> Hi, all,
>>>>           Since the last week‘s attack, “ceph.com/packages/ceph-extras”
>>>> can be
>>>> opened never, but where can I get the releases of ceph-extra now?
>>>>
>>>> Thanks and Regards,
>>>> WangSongbo
>>>>
>>> The packages in "ceph-extras" were old and subject to CVEs (the big
>>> one being VENOM, CVE-2015-3456). So I don't intend to host ceph-extras
>>> in the new location.
>>>
>>> - Ken
>>


[-- Attachment #1.2: Type: text/html, Size: 2649 bytes --]

[-- Attachment #2: Type: text/plain, Size: 178 bytes --]

_______________________________________________
ceph-users mailing list
ceph-users-idqoXFIVOFJgJs9I8MT0rw@public.gmane.org
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com