Red Hat Security AdvisoryRHSA-2013:0691
Red Hat Storage 2.0 security, bug fix, and enhancement update #4
Released 2013-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Storage 2.0 Console rhsc-2.0.techpreview1-4.el6rhs, rhsc-backend-2.0.techpreview1-4.el6rhs, rhsc-config-2.0.techpreview1-4.el6rhs +11
- Red Hat Storage Native Client for Red Hat Enterprise Linux 5 glusterfs-3.3.0.7rhs-1.el5, glusterfs-devel-3.3.0.7rhs-1.el5, glusterfs-fuse-3.3.0.7rhs-1.el5 +1
- Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs-3.3.0.7rhs-1.el6, glusterfs-devel-3.3.0.7rhs-1.el6, glusterfs-fuse-3.3.0.7rhs-1.el6 +1
- Red Hat Storage Server 2.0 appliance-1.7.1-1.el6rhs, appliance-base-1.7.1-1.el6rhs, augeas-0.9.0-1.el6 +37
Fixes 3 records
Priority MEDIUM 52
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a cra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06571 · Published 2012-10-22 · Fixed in 1.7.0 CWE-502
Priority LOW 17
The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard file…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00335 · Published 2012-12-20 · Partial fix CWE-264
Priority LOW 11
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/v…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00317 · Published 2013-04-09 · Fixed CWE-264
THREATIST.IORead the docs