Red Hat Security AdvisoryRHSA-2015:1846
Red Hat Gluster Storage 3.1 update
Released 2015-10-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster Storage NFS 3.1 on RHEL-7 nfs-ganesha-2.2.0-9.el7rhgs, nfs-ganesha-gluster-2.2.0-9.el7rhgs
- Red Hat Gluster Storage Nagios 3.1 on RHEL-7 gluster-nagios-common-0.2.2-1.el7rhgs, nagios-server-addons-0.2.2-1.el7rhgs
- Red Hat Gluster Storage Server 3.1 on RHEL-7 gdeploy-1.0-12.el7rhgs, gluster-nagios-addons-0.2.5-1.el7rhgs, gluster-nagios-common-0.2.2-1.el7rhgs +37
- Red Hat Storage Native Client for Red Hat Enterprise Linux 7 glusterfs-3.7.1-16.el7, glusterfs-api-3.7.1-16.el7, glusterfs-api-devel-3.7.1-16.el7 +7
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts glusterfs-3.7.1-16.el7, glusterfs-cli-3.7.1-16.el7
Fixes 2 records
Priority LOW 32
OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location contain…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.04063 · Published 2015-04-17 · Partial fix · 2.3.0 CWE-264
Priority LOW 32
The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which excee…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01713 · Published 2016-06-07 · Fixed CWE-284
