Red Hat Security AdvisoryRHSA-2015:1495
Red Hat Gluster Storage 3.1 update
Released 2015-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Gluster 3 Samba on RHEL-6 libtalloc-2.1.1-4.el6rhs, libtalloc-devel-2.1.1-4.el6rhs, pytalloc-2.1.1-4.el6rhs +1
- Red Hat Gluster Storage NFS 3.1 on RHEL-6 nfs-ganesha-2.2.0-5.el6rhs, nfs-ganesha-gluster-2.2.0-5.el6rhs, nfs-ganesha-nullfs-2.2.0-5.el6rhs
- Red Hat Gluster Storage Nagios 3.1 on RHEL-6 check-mk-1.2.6p1-3.el6rhs, check-mk-livestatus-1.2.6p1-3.el6rhs, gluster-nagios-common-0.2.0-1.el6rhs +10
- Red Hat Gluster Storage Server 3.1 on RHEL-6 augeas-1.0.0-10.el6, augeas-devel-1.0.0-10.el6, augeas-libs-1.0.0-10.el6 +47
- Red Hat Storage Native Client for Red Hat Enterprise Linux 5 glusterfs-3.7.1-11.el5, glusterfs-api-3.7.1-11.el5, glusterfs-api-devel-3.7.1-11.el5 +7
- Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs-3.7.1-11.el6, glusterfs-api-3.7.1-11.el6, glusterfs-api-devel-3.7.1-11.el6 +7
Fixes 4 records
Priority MEDIUM 49
The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automa…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06138 · Published 2014-09-02 · Fixed CWE-94
Priority LOW 26
Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.01785 · Published 2014-09-02 · Fixed
Priority LOW 24
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03133 · Published 2014-10-17 · Partial fix · 2.2.0 CWE-399
Priority LOW 20
Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified v…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01731 · Published 2014-08-22 · Fixed CWE-79
THREATIST.IORead the docs