Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 25 articles for you...
202

openSUSE glusterfs Important Fixes Buffer Overflow Data Loss 2026-0104-1

An update that solves two vulnerabilities and has two fixes is now available.. openSUSE Security Update: Security update for glusterfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0104-1 Rating: important References: #1208517 #1208519 #1210894 #1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-26253 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for glusterfs fixes the following issues: - Update to release 11.2 * Next minor release tentative date: Release will be based on requirement only * Users are highly encouraged to upgrade to newer releases of GlusterFS. * Important fixes in this release - Regression suite tests failures are addressed - Fixed notify stack-based buffer over-read (boo#1208519, CVE-2023-26253) - Update to release 11.1 * Fix upgrade issue by reverting posix change related to storage.reserve value * Fix possible data loss during rebalance if there is any linkfile on the system - Disable IO_uring for now [boo#1210894] - Update to release 11 [boo#1208517] [boo#1208519] * Major performance impovement of ~36% with rmdir operations * Extension of ZFS support for snapshots * Qouta implimentation based on namespace * Major cleanups and readdir/readdirp improvements * Fixed use-after-free in dht_setxattr_mds_cbk (CVE-2022-48340) - Update to release 10.2 * Some 165 bugfixes with none particularly sticking out Patch Instructions: To install this openSUSE Security Update usethe SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-104=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): glusterfs-11.2-bp156.4.3.1 glusterfs-devel-11.2-bp156.4.3.1 libgfapi0-11.2-bp156.4.3.1 libgfchangelog0-11.2-bp156.4.3.1 libgfrpc0-11.2-bp156.4.3.1 libgfxdr0-11.2-bp156.4.3.1 libglusterfs0-11.2-bp156.4.3.1 - openSUSE Backports SLE-15-SP6 (noarch): python3-gluster-11.2-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-48340.html https://www.suse.com/security/cve/CVE-2023-26253.html https://bugzilla.suse.com/1208517 https://bugzilla.suse.com/1208519 https://bugzilla.suse.com/1210894 https://bugzilla.suse.com/1212476 . Critical update for openSUSE glusterfs resolves important issues and two fixes, enhancing security and performance.. openSUSE glusterfs update important fixes security risk. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 27, 2026 Important OpenSUSE
202

openSUSE 2026-0099-1 glusterfs Important Buffer Overread DoS CVE-2022-48340

An update that solves two vulnerabilities and has two fixes is now available.. openSUSE Security Update: Security update for glusterfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0099-1 Rating: important References: #1208517 #1208519 #1210894 #1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-26253 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for glusterfs fixes the following issues: - Update to release 11.2 * Next minor release tentative date: Release will be based on requirement only * Users are highly encouraged to upgrade to newer releases of GlusterFS. * Important fixes in this release - Regression suite tests failures are addressed - Fixed notify stack-based buffer over-read (boo#1208519, CVE-2023-26253) - Update to release 11.1 * Fix upgrade issue by reverting posix change related to storage.reserve value * Fix possible data loss during rebalance if there is any linkfile on the system - Disable IO_uring for now [boo#1210894] - Update to release 11 [boo#1208517] [boo#1208519] * Major performance impovement of ~36% with rmdir operations * Extension of ZFS support for snapshots * Qouta implimentation based on namespace * Major cleanups and readdir/readdirp improvements * Fixed use-after-free in dht_setxattr_mds_cbk (CVE-2022-48340) - Update to release 10.2 * Some 165 bugfixes with none particularly sticking out Patch Instructions: To install this openSUSE Security Update usethe SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-99=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64): glusterfs-11.2-bp157.2.3.1 glusterfs-devel-11.2-bp157.2.3.1 libgfapi0-11.2-bp157.2.3.1 libgfchangelog0-11.2-bp157.2.3.1 libgfrpc0-11.2-bp157.2.3.1 libgfxdr0-11.2-bp157.2.3.1 libglusterfs0-11.2-bp157.2.3.1 - openSUSE Backports SLE-15-SP7 (noarch): python3-gluster-11.2-bp157.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-48340.html https://www.suse.com/security/cve/CVE-2023-26253.html https://bugzilla.suse.com/1208517 https://bugzilla.suse.com/1208519 https://bugzilla.suse.com/1210894 https://bugzilla.suse.com/1212476 . This advisory reveals important updates for glusterfs addressing key vulnerabilities in openSUSE systems.. openSUSE updates, glusterfs vulnerabilities, Linux security patch, cloud storage security. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 27, 2026 Important OpenSUSE
172

Ubuntu 23.10: 6507-1 Moderate: GlusterFS Denial Of Service Risk

GlusterFS could be made to crash if it received a specially crafted request.. ========================================================================== Ubuntu Security Notice USN-6507-1 November 22, 2023 glusterfs vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS Summary: GlusterFS could be made to crash if it received a specially crafted request. Software Description: - glusterfs: clustered file-system Details: It was discovered that GlusterFS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GlusterFS to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: glusterfs-client 10.3-5ubuntu0.1 glusterfs-common 10.3-5ubuntu0.1 glusterfs-server 10.3-5ubuntu0.1 Ubuntu 23.04: glusterfs-client 10.3-4ubuntu0.2 glusterfs-common 10.3-4ubuntu0.2 glusterfs-server 10.3-4ubuntu0.2 Ubuntu 22.04 LTS: glusterfs-client 10.1-1ubuntu0.2 glusterfs-common 10.1-1ubuntu0.2 glusterfs-server 10.1-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6507-1 CVE-2022-48340 Package Information: https://launchpad.net/ubuntu/+source/glusterfs/10.3-5ubuntu0.1 https://launchpad.net/ubuntu/+source/glusterfs/10.3-4ubuntu0.2 . Debian identifies a PostgreSQL vulnerability that may lead to service interruptions when processing specially formatted queries, impacting several versions.. GlusterFS Security, Denial Of Service, Ubuntu Update, Memory Crash Issue, Software Patch. . LinuxSecurity.com Team

Calendar 2 Nov 22, 2023 Ubuntu
217

Oracle Linux 8: ELSA-2023-4328 Moderate: Samba Memory Leak Issue

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-4328 https://linux.oracle.com/errata/ELSA-2023-4328.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ctdb-4.17.5-3.0.1.el8_8.x86_64.rpm libnetapi-4.17.5-3.0.1.el8_8.i686.rpm libnetapi-4.17.5-3.0.1.el8_8.x86_64.rpm libsmbclient-4.17.5-3.0.1.el8_8.i686.rpm libsmbclient-4.17.5-3.0.1.el8_8.x86_64.rpm libwbclient-4.17.5-3.0.1.el8_8.i686.rpm libwbclient-4.17.5-3.0.1.el8_8.x86_64.rpm python3-samba-4.17.5-3.0.1.el8_8.i686.rpm python3-samba-4.17.5-3.0.1.el8_8.x86_64.rpm python3-samba-dc-4.17.5-3.0.1.el8_8.x86_64.rpm python3-samba-test-4.17.5-3.0.1.el8_8.x86_64.rpm samba-4.17.5-3.0.1.el8_8.x86_64.rpm samba-client-4.17.5-3.0.1.el8_8.x86_64.rpm samba-client-libs-4.17.5-3.0.1.el8_8.i686.rpm samba-client-libs-4.17.5-3.0.1.el8_8.x86_64.rpm samba-common-4.17.5-3.0.1.el8_8.noarch.rpm samba-common-libs-4.17.5-3.0.1.el8_8.i686.rpm samba-common-libs-4.17.5-3.0.1.el8_8.x86_64.rpm samba-common-tools-4.17.5-3.0.1.el8_8.x86_64.rpm samba-dc-libs-4.17.5-3.0.1.el8_8.i686.rpm samba-dc-libs-4.17.5-3.0.1.el8_8.x86_64.rpm samba-dcerpc-4.17.5-3.0.1.el8_8.x86_64.rpm samba-krb5-printing-4.17.5-3.0.1.el8_8.x86_64.rpm samba-ldb-ldap-modules-4.17.5-3.0.1.el8_8.x86_64.rpm samba-libs-4.17.5-3.0.1.el8_8.i686.rpm samba-libs-4.17.5-3.0.1.el8_8.x86_64.rpm samba-pidl-4.17.5-3.0.1.el8_8.noarch.rpm samba-test-4.17.5-3.0.1.el8_8.x86_64.rpm samba-test-libs-4.17.5-3.0.1.el8_8.x86_64.rpm samba-tools-4.17.5-3.0.1.el8_8.x86_64.rpm samba-usershares-4.17.5-3.0.1.el8_8.x86_64.rpm samba-vfs-iouring-4.17.5-3.0.1.el8_8.x86_64.rpm samba-winbind-4.17.5-3.0.1.el8_8.x86_64.rpm samba-winbind-clients-4.17.5-3.0.1.el8_8.x86_64.rpm samba-winbind-krb5-locator-4.17.5-3.0.1.el8_8.x86_64.rpm samba-winbind-modules-4.17.5-3.0.1.el8_8.i686.rpm samba-winbind-modules-4.17.5-3.0.1.el8_8.x86_64.rpm samba-winexe-4.17.5-3.0.1.el8_8.x86_64.rpm libnetapi-devel-4.17.5-3.0.1.el8_8.i686.rpm libnetapi-devel-4.17.5-3.0.1.el8_8.x86_64.rpm libsmbclient-devel-4.17.5-3.0.1.el8_8.i686.rpm libsmbclient-devel-4.17.5-3.0.1.el8_8.x86_64.rpm libwbclient-devel-4.17.5-3.0.1.el8_8.i686.rpm libwbclient-devel-4.17.5-3.0.1.el8_8.x86_64.rpm python3-samba-devel-4.17.5-3.0.1.el8_8.i686.rpm python3-samba-devel-4.17.5-3.0.1.el8_8.x86_64.rpm samba-devel-4.17.5-3.0.1.el8_8.i686.rpm samba-devel-4.17.5-3.0.1.el8_8.x86_64.rpm samba-vfs-glusterfs-4.17.5-3.0.1.el8_8.x86_64.rpm aarch64: samba-vfs-glusterfs-4.17.5-3.0.1.el8_8.aarch64.rpm ctdb-4.17.5-3.0.1.el8_8.aarch64.rpm libnetapi-4.17.5-3.0.1.el8_8.aarch64.rpm libsmbclient-4.17.5-3.0.1.el8_8.aarch64.rpm libwbclient-4.17.5-3.0.1.el8_8.aarch64.rpm python3-samba-4.17.5-3.0.1.el8_8.aarch64.rpm python3-samba-dc-4.17.5-3.0.1.el8_8.aarch64.rpm python3-samba-test-4.17.5-3.0.1.el8_8.aarch64.rpm samba-4.17.5-3.0.1.el8_8.aarch64.rpm samba-client-4.17.5-3.0.1.el8_8.aarch64.rpm samba-client-libs-4.17.5-3.0.1.el8_8.aarch64.rpm samba-common-4.17.5-3.0.1.el8_8.noarch.rpm samba-common-libs-4.17.5-3.0.1.el8_8.aarch64.rpm samba-common-tools-4.17.5-3.0.1.el8_8.aarch64.rpm samba-dc-libs-4.17.5-3.0.1.el8_8.aarch64.rpm samba-dcerpc-4.17.5-3.0.1.el8_8.aarch64.rpm samba-krb5-printing-4.17.5-3.0.1.el8_8.aarch64.rpm samba-ldb-ldap-modules-4.17.5-3.0.1.el8_8.aarch64.rpm samba-libs-4.17.5-3.0.1.el8_8.aarch64.rpm samba-pidl-4.17.5-3.0.1.el8_8.noarch.rpm samba-test-4.17.5-3.0.1.el8_8.aarch64.rpm samba-test-libs-4.17.5-3.0.1.el8_8.aarch64.rpm samba-tools-4.17.5-3.0.1.el8_8.aarch64.rpm samba-usershares-4.17.5-3.0.1.el8_8.aarch64.rpm samba-vfs-iouring-4.17.5-3.0.1.el8_8.aarch64.rpm samba-winbind-4.17.5-3.0.1.el8_8.aarch64.rpm samba-winbind-clients-4.17.5-3.0.1.el8_8.aarch64.rpm samba-winbind-krb5-locator-4.17.5-3.0.1.el8_8.aarch64.rpm samba-winbind-modules-4.17.5-3.0.1.el8_8.aarch64.rpm libnetapi-devel-4.17.5-3.0.1.el8_8.aarch64.rpm libsmbclient-devel-4.17.5-3.0.1.el8_8.aarch64.rpm libwbclient-devel-4.17.5-3.0.1.el8_8.aarch64.rpm python3-samba-devel-4.17.5-3.0.1.el8_8.aarch64.rpm samba-devel-4.17.5-3.0.1.el8_8.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates//samba-4.17.5-3.0.1.el8_8.src.rpm Related CVEs: CVE-2023-3347 Description of changes: [4.17.5-3.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815] - Gluster volumes not accessible via Samba due tomissing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.17.5-3] - resolves: rhbz#2223601 - Fix trust relationship between workstation and DC - resolves: rhbz#2222895 - Fix CVE-2023-3347 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Notice ELSA-2023-4328 outlines updates for Samba addressing memory leaks and resolving access complications with GlusterFS.. Oracle Linux, Samba Update, Memleak Fix, GlusterFS Issues. . LinuxSecurity.com Team

Calendar 2 Aug 10, 2023 Oracle
172

Ubuntu: 23.04, 22.10, 22.04 LTS USN-6157-1 Critical: GlusterFS DoS

GlusterFS could be made to crash if it received a specially crafted request.. =========================================================================Ubuntu Security Notice USN-6157-1 June 12, 2023 glusterfs vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS Summary: GlusterFS could be made to crash if it received a specially crafted request. Software Description: - glusterfs: clustered file-system Details: Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: glusterfs-client 10.3-4ubuntu0.1 glusterfs-common 10.3-4ubuntu0.1 glusterfs-server 10.3-4ubuntu0.1 Ubuntu 22.10: glusterfs-client 10.2-1ubuntu0.1 glusterfs-common 10.2-1ubuntu0.1 glusterfs-server 10.2-1ubuntu0.1 Ubuntu 22.04 LTS: glusterfs-client 10.1-1ubuntu0.1 glusterfs-common 10.1-1ubuntu0.1 glusterfs-server 10.1-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6157-1 CVE-2023-26253 Package Information: https://launchpad.net/ubuntu/+source/glusterfs/10.3-4ubuntu0.1 https://launchpad.net/ubuntu/+source/glusterfs/10.2-1ubuntu0.1 https://launchpad.net/ubuntu/+source/glusterfs/10.1-1ubuntu0.1 . The Ubuntu Security Announcement USN-6158-1 highlights a severe vulnerability in OpenSSL which might lead to potential unauthorized access through specially designed packets.. GlusterFS Denial Of Service, Ubuntu Security Update, GlusterFS Crash Fix. .Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 12, 2023 Critical Ubuntu
89

Fedora 37 GlusterFS 10.4 Moderate Buffer Overflow Advisory

GlusterFS 10.4 GA Security fix for CVE-2023-26253, CVE-2022-48340. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-5a54eea360 2023-04-12 01:32:13.145118 --------------------------------------------------------------------------------Name : glusterfs Product : Fedora 37 Version : 10.4 Release : 1.fc37 URL : https://docs.gluster.org/en/latest/ Summary : Distributed File System Description : GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable. This package includes the glusterfs binary, the glusterfsd daemon and the libglusterfs and glusterfs translator modules common to both GlusterFS server and client framework. --------------------------------------------------------------------------------Update Information: GlusterFS 10.4 GA Security fix for CVE-2023-26253, CVE-2022-48340 --------------------------------------------------------------------------------ChangeLog: * Thu Apr 6 2023 Kaleb S. KEITHLEY - 10.4-1 - 10.4 GA --------------------------------------------------------------------------------References: [ 1 ] Bug #2173922 - CVE-2022-48340 glusterfs: heap use-after-free in dht_setxattr_mds_cbk() in dht-common.c https://bugzilla.redhat.com/show_bug.cgi?id=2173922 [ 2 ] Bug #2173923 - CVE-2023-26253 glusterfs: stack-based buffer overflow in notify() in fuse-bridge.c https://bugzilla.redhat.com/show_bug.cgi?id=2173923 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2023-5a54eea360' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The release of GlusterFS 10.4 GA for Fedora 37 effectively resolves major security vulnerabilities linked to CVE-2023-26253 and CVE-2022-48340.. GlusterFS, Fedora, Buffer Overflow, Security Fix, Security Patch. . LinuxSecurity.com Team

Calendar 2 Apr 12, 2023 Fedora
172

Ubuntu 16.04 ESM: USN-5990-1 High: MongoDB Information Disclosure

GlusterFS could be made to crash if it received a specially crafted request.. =========================================================================Ubuntu Security Notice USN-5989-1 March 30, 2023 glusterfs vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: GlusterFS could be made to crash if it received a specially crafted request. Software Description: - glusterfs: clustered file-system Details: Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: glusterfs-client 3.7.6-1ubuntu1+esm2 glusterfs-common 3.7.6-1ubuntu1+esm2 glusterfs-server 3.7.6-1ubuntu1+esm2 In general, a standard system update will make all the necessary changes. References: CVE-2023-26253 . Issues with GlusterFS running on Ubuntu may result from specially crafted inputs, potentially compromising the system's reliability. Ensure updates are applied to maintain optimal performance.. GlusterFS Security Patch, Ubuntu Updates, Denial of Service Exploit. . LinuxSecurity.com Team

Calendar 2 Mar 30, 2023 Ubuntu
197

Debian: DLA-2806-1 Moderate: GlusterFS Multiple Security Issues

Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information disclosure, denial-of-service or the execution of arbitrary code. . -------------------------------------------------------------------------Debian LTS Advisory DLA-2806-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Markus Koschany November 01, 2021 https://wiki.debian.org/LTS -------------------------------------------------------------------------Package : glusterfs Version : 3.8.8-1+deb9u1 CVE ID : CVE-2018-1088 CVE-2018-10841 CVE-2018-10904 CVE-2018-10907 CVE-2018-10911 CVE-2018-10913 CVE-2018-10914 CVE-2018-10923 CVE-2018-10926 CVE-2018-10927 CVE-2018-10928 CVE-2018-10929 CVE-2018-10930 CVE-2018-14652 CVE-2018-14653 CVE-2018-14654 CVE-2018-14659 CVE-2018-14660 CVE-2018-14661 Debian Bug : 909215 Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information disclosure, denial-of-service or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version 3.8.8-1+deb9u1. We recommend that you upgrade your glusterfs packages. For the detailed security status of glusterfs please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/glusterfs Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Serious vulnerabilities discovered in GlusterFS jeopardize data security, urging urgent updates for users on Debian.. GlusterFS Update, Debian Security Notice, Buffer Overflows, Path Traversal Issues. . LinuxSecurity.com Team

Calendar 2 Nov 01, 2021 Debian LTS
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here