glusterfs-3.8.4-54.8.el7

エラータID: AXSA:2018-3121:04

Release date: 
Monday, May 28, 2018 - 10:54
Subject: 
glusterfs-3.8.4-54.8.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

GlusterFS is a key building block of Asianux Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage servers over network interconnections into one large, parallel network file system.

Security Fix(es):

* It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes. (CVE-2018-1112)

CVE-2018-1112
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

Solution: 

Update packages.

CVEs: 
CVE-2018-1112
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
Additional Info: 

N/A

Download: 

SRPMS
  1. glusterfs-3.8.4-54.8.el7.src.rpm
    MD5: 1ef059772f2bf5e1f580c95e656ab9d0
    SHA-256: 2f1283a1770b61527ed164eb1f110d9956e22b4ed75d2a5e768bec7cd5a74fba
    Size: 9.32 MB

Asianux Server 7 for x86_64
  1. glusterfs-3.8.4-54.8.el7.x86_64.rpm
    MD5: a285c6effe8dccee623ed78002fff140
    SHA-256: 42402731b1ebb728529c693199a6d08ae4478b955abf76b8d3479a95a1dcdd69
    Size: 528.75 kB
  2. glusterfs-api-3.8.4-54.8.el7.x86_64.rpm
    MD5: 8f6afe8ff2f09f537a382fd610bcbf4b
    SHA-256: 96348490002ee46b2bff0e88831d5725203b73685fa21fcea205fcb7428ccb80
    Size: 75.45 kB
  3. glusterfs-cli-3.8.4-54.8.el7.x86_64.rpm
    MD5: 0113f30f3ae5eac9b3df58c401f49cc3
    SHA-256: b5bb6ad463c68106ed3791775f5b77157de9aca661ebd0d8756a28e0884fab93
    Size: 176.15 kB
  4. glusterfs-client-xlators-3.8.4-54.8.el7.x86_64.rpm
    MD5: 0e5c4f15f3becd3bfe897cce3cf8c116
    SHA-256: 4cf85ec21d41a6c3307cfb0950842d0e1be9f6012b80218271f80bbe241ad7af
    Size: 789.64 kB
  5. glusterfs-fuse-3.8.4-54.8.el7.x86_64.rpm
    MD5: 40a24a36c45a91a68aa83a3b7357f920
    SHA-256: e4b22108edce74256b8c8ac246b99e8f23d14dcf5c4be50ef57dfd1b88b5ac3a
    Size: 120.43 kB
  6. glusterfs-libs-3.8.4-54.8.el7.x86_64.rpm
    MD5: a9be1c67e994c1d9b1fc13bbb4ab46e6
    SHA-256: f2c1d1fb6fe028337d41f49ccd1fc785af20da989d7f474c256d290496cefecc
    Size: 369.98 kB
  7. glusterfs-rdma-3.8.4-54.8.el7.x86_64.rpm
    MD5: 55738ac2682f17c764f51fe38b8a9980
    SHA-256: 89b153c3a3773f290d84921daadf718dba3740260eff5f7990a38bc15fcfc5a2
    Size: 44.80 kB