glusterfs-3.8.4-54.9.AXS4

エラータID: AXSA:2018-3123:02

Release date: 
Monday, May 28, 2018 - 11:04
Subject: 
glusterfs-3.8.4-54.9.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Severity: 
High
Description: 

GlusterFS is a key building block of Asianux Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage servers over network interconnections into one large, parallel network file system.

Security Fix(es):

* It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes. (CVE-2018-1112)

CVE-2018-1112
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

Solution: 

Update packages.

CVEs: 
CVE-2018-1112
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
Additional Info: 

N/A

Download: 

SRPMS
  1. glusterfs-3.8.4-54.9.AXS4.src.rpm
    MD5: 35fed8169659924829af85c4ace6046a
    SHA-256: f12efc3df5100be0f432549f188b0ad4a8b543775aef78d1547759a04e44a1b9
    Size: 9.32 MB

Asianux Server 4 for x86_64
  1. glusterfs-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 6453f74a59b71840077f38e86e4b3a91
    SHA-256: d90067f504090e6e2479d231008a5cafc919642ea6717686c90ad429f920a0e6
    Size: 494.30 kB
  2. glusterfs-api-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: f6dc99d0bd2cbb94d3a416188409648c
    SHA-256: 8dc84fc1a55c0647eaea5c8174fbba7368d648bcc2ae4d397e18bc457865cfcb
    Size: 68.61 kB
  3. glusterfs-api-devel-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 0a1e756b7ebfc878c4ac27773c78b9ad
    SHA-256: 804ee98da420c56a2f7c425e5e34b85d71428e10af620b9d1bc006bafe485b57
    Size: 22.76 kB
  4. glusterfs-client-xlators-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 7c09ebd71a3c19296f7c6ce2c451515a
    SHA-256: a494cbe528318f1cd3d4a19d8af09b23c4aac53858fe3091c8a7c1dab12b9f34
    Size: 1.20 MB
  5. glusterfs-devel-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 2b2110576b70ae0d0038ef59ac79592a
    SHA-256: 37559674fa278dd87a3a5ea827b02f2b5caa776a0478e425a66a613e50346c41
    Size: 160.73 kB
  6. glusterfs-fuse-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 63246210c4633c0860020a16eda8b0c4
    SHA-256: 1436c20fc69048d4065a1f641bebeca9a7fc1092b13719a3be634cda4c232e5d
    Size: 114.84 kB
  7. glusterfs-libs-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 0407193b68de5820885858182679de1e
    SHA-256: 65c3b1999f34b486594c22d9cb3a17edf3c78091ea52ad31b28e07016cb3cabc
    Size: 356.57 kB
  8. glusterfs-rdma-3.8.4-54.9.AXS4.x86_64.rpm
    MD5: 5145d413c7d38a6410918cdadf16058e
    SHA-256: a961f3cf2954203c20beed0737b2465c12caf269d4d877bae9a00a2d98b0e717
    Size: 42.91 kB