Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Red Hat 7 RHSA-2018-1954-01 Important GlusterFS Access Control

red hat
Calendar Grey June 20, 2018
Scroller Redhat
Ceph has been granted a crucial security enhancement for CentOS, targeting severe authorization vulnerabilities.
An update for glusterfs is now available for Native Client for Red Hat Enterprise Linux 7 for Red Hat Storage and Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage servers over network interconnections into one large, parallel network file system.
Security Fix:
* glusterfs: access trusted peer group via remote-host command (CVE-2018-10841)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat update access control threat important GlusterFS

References

https://access.redhat.com/security/cve/CVE-2018-10841 https://access.redhat.com/security/updates/classification#important

Package List

Red Hat Gluster Storage Server 3.3 on RHEL-7:
Source: glusterfs-3.8.4-54.10.el7rhgs.src.rpm
noarch: glusterfs-resource-agents-3.8.4-54.10.el7rhgs.noarch.rpm python-gluster-3.8.4-54.10.el7rhgs.noarch.rpm
x86_64: glusterfs-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-api-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-api-devel-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-cli-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-client-xlators-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-debuginfo-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-devel-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-events-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-fuse-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-ganesha-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-geo-replication-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-libs-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-rdma-3.8.4-54.10.el7rhgs.x86_64.rpm glusterfs-server-3.8.4-54.10.el7rhgs.x86_64.rpm
Red Hat Storage Native Client for Red Hat Enterprise Linux 7:
Source: glusterfs-3.8.4-54.10.el7.src.rpm
noarch: python-gluster-3.8.4-54.10.el7.noarch.rpm
x86_64: glusterfs-3.8.4-54.10.el7.x86_64.rpm glusterfs-api-3.8.4-54.10.el7.x86_64.rpm glusterfs-api-devel-3.8.4-54.10.el7.x86_64.rpm glusterfs-cli-3.8.4-54.10.el7.x86_64.rpm glusterfs-client-xlators-3.8.4-54.10.el7.x86_64.rpm

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2018:1954-01
Product: Red Hat Gluster Storage
Advisory URL: https://access.redhat.com/errata/RHSA-2018:1954
Issue date: 2018-06-20

Topic

An update for glusterfs is now available for Native Client for Red HatEnterprise Linux 7 for Red Hat Storage and Red Hat Gluster Storage 3.3 forRed Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat update access control threat important GlusterFS

Relevant Releases Architectures

Red Hat Gluster Storage Server 3.3 on RHEL-7 - noarch, x86_64

Red Hat Storage Native Client for Red Hat Enterprise Linux 7 - noarch, x86_64

Bugs Fixed

1582043 - CVE-2018-10841 glusterfs: access trusted peer group via remote-host command

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.