Skip to main content

Missing RHEL 8.x support for Vertica in AWS market place

  • October 3, 2023
  • 14 replies
  • 14 views

fpdsvertica
Forum|alt.badge.img

Hi ,
We are looking for RHEL8.x supported appliance in AWS market place as there are some critical security vulnerabilities with the current RHEL 7.5 appliance. Any update/guidance on this would be greatly appreciated.

14 replies

SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 3, 2023

we have an active feature request to support RHEL 8 to provision vertica cluster on all cloud vendors. it is currently being worked on by engineering. once this feature is released, you should be able to deploy vertica on RHEL 8 via AWS Marketplace.


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 3, 2023

Thank you for the update @SruthiA. Any time line when it is going to be available, as the security issue reported is CRITICAL and requires immediate upgrade in our system.


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 3, 2023

currently there is no ETA. Could you please open a support case and share the vulnerabilities. we can check internally if there is a way to mitigate it.


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 3, 2023

These are not vertica s/w related vulnerabilities but are of RHEL 7.5. I can provide the CVE numbers, we applied all the latest patches that are allowed on the appliance. But its looking for either RHEL 7.9 or 8.x


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 3, 2023

Here are couple of High severity CVEs for your reference
Source: AWS FPDS RHEL Nessus Security Scan - August 2023
*Finding Title/Header: 162583 - RHEL 7 : kernel (RHSA-2022:5232)

**CVE ID:
**
CVE-2022-1729
CVE-2022-1966


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 3, 2023

Thank you @fpdsvertica for sharing the CVE numbers. I have raised your concerns internally and shared them with the CVE Numbers.


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 3, 2023

could you please share your vertica version?


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 3, 2023

Vertica 10.0.1-6 Red Hat 7.5 - 1608058653-1ccb1373-3e37-461b-89b3-1c2b91d451d1-ami-02d53d4a77436d590.4 included the the appliance ami details as well


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 3, 2023

Thank you very much.. I just would like to let you know vertica 10.0 is out of support. even if we release support for RHEL 8, it would be on the latest vertica version.


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 3, 2023

Thank you, That still works as long as a latest version of appliance is available we can work with that.


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 9, 2023

@SruthiA could you please provide some tentative timeline when it will be released, so that we can work with our GSA security team.


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • October 9, 2023

@fpdsvertica : Tentatively in first quarter of 2024..


fpdsvertica
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • October 10, 2023

Thank you @SruthiA


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • February 8, 2024

@fpdsvertica : I just wanted to let you know that RHEL 8 AMI is available in marketplace. Please use it and install vertica