Red Hat Security Advisory

RHSA-2020:4143

OCS 3.11.z async security, bug fix, and enhancement update

Released 2020-09-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster Storage Server 3.5 on RHEL-7 gluster-block-0.2.1-36.2.el7rhgs, heketi-9.0.0-9.5.el7rhgs, heketi-client-9.0.0-9.5.el7rhgs +4
Red Hat Storage Native Client for Red Hat Enterprise Linux 7 heketi-9.0.0-9.5.el7rhgs, heketi-client-9.0.0-9.5.el7rhgs

TI-2020-08660 CVE-2020-10763 · GHSA-rm7c-x6gj-2mr8

LOW 25

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00419 Published 2020-11-24 Partial fix · 10.1.0 CWE-532

TI-2020-08659 CVE-2020-10762 · GHSA-3grh-xhcf-mgx4

LOW 25

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00341 Published 2020-11-24 Fixed CWE-732