Status of CVE-2023-49298 / ZFS data corruption

[Sralityhe]

Dear Proxmox Team,

there is a CVE[1] in ZFS right now which might lead to data corruption in some sceneraios. Since promox ships it own version of zfs package versions, may i please ask what the current situation on CVE is right now? Is there any ETA for merging of patch [2]?

Thanks!

[1] https://github.com/advisories/GHSA-mvg7-8xh2-47rf
[2] https://github.com/openzfs/zfs/pull/15571

 

[Dunuin]

See: https://forum.proxmox.com/threads/psa-zfs-silent-data-corruption.137099/

 

[Sralityhe]

Thanks!

Searched for the CVE + Proxmox Forum on google on couldnt find anything.