Red Hat Security AdvisoryRHSA-2018:2892
glusterfs security, bug fix, and enhancement update
Released 2018-10-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glusterfs-3.12.2-18.el6, glusterfs-api-3.12.2-18.el6, glusterfs-client-xlators-3.12.2-18.el6 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) glusterfs-api-devel-3.12.2-18.el6, glusterfs-cli-3.12.2-18.el6, glusterfs-devel-3.12.2-18.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) glusterfs-3.12.2-18.el6, glusterfs-api-3.12.2-18.el6, glusterfs-client-xlators-3.12.2-18.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glusterfs-api-devel-3.12.2-18.el6, glusterfs-cli-3.12.2-18.el6, glusterfs-devel-3.12.2-18.el6
- Red Hat Enterprise Linux Server (v. 6) glusterfs-3.12.2-18.el6, glusterfs-api-3.12.2-18.el6, glusterfs-client-xlators-3.12.2-18.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) glusterfs-api-devel-3.12.2-18.el6, glusterfs-cli-3.12.2-18.el6, glusterfs-devel-3.12.2-18.el6
- Red Hat Enterprise Linux Workstation (v. 6) glusterfs-3.12.2-18.el6, glusterfs-api-3.12.2-18.el6, glusterfs-client-xlators-3.12.2-18.el6 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glusterfs-api-devel-3.12.2-18.el6, glusterfs-cli-3.12.2-18.el6, glusterfs-devel-3.12.2-18.el6
Fixes 1 record
Priority LOW 38
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02871 · Published 2018-09-04 · Fixed CWE-190