glusterfs-3.8.4-54.11.AXS4

エラータID: AXSA:2018-3233:03

Release date: 
Monday, July 2, 2018 - 00:10
Subject: 
glusterfs-3.8.4-54.11.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Severity: 
High
Description: 

GlusterFS is a key building block of Asianux Gluster Storage. It is based
on a stackable user-space design and can deliver exceptional performance
for diverse workloads. GlusterFS aggregates various storage servers over
network interconnections into one large, parallel network file system.

Security Fix:

* glusterfs: access trusted peer group via remote-host command
(CVE-2018-10841)

For more details about the security issue(s), including the impact, a
CVSS score, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2018-10841
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2018-10841
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.
Additional Info: 

N/A

Download: 

SRPMS
  1. glusterfs-3.8.4-54.11.AXS4.src.rpm
    MD5: f2ea8502efcd99355cb0455caff80727
    SHA-256: 485b5eb8dec8e7617c03196ce26575e5f85d662e631796d5e6fe922cb9ebef6d
    Size: 9.32 MB

Asianux Server 4 for x86_64
  1. glusterfs-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 38bd5d999189ab0eca3e3d0fb4312c59
    SHA-256: d9fddd3415decdce64a8f29a16846f623fd78d25a3e54df213a002384ea86f89
    Size: 497.04 kB
  2. glusterfs-api-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 59101e893678e4817ab16c0f5bdd45d5
    SHA-256: 1142efc844c9d4aec226cac37427b472ef718ae2588dd79f8f76aa00626b3920
    Size: 68.72 kB
  3. glusterfs-api-devel-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: b6f6b3ff17eb82d10fea67a73be12ad7
    SHA-256: d1a6eba05ad0f3c9df3e018e2505b676aeda62e350d1468115678bde76858152
    Size: 22.93 kB
  4. glusterfs-client-xlators-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 19aca5a2cfe4f35676cc56085e8b774f
    SHA-256: 3c4bf4d273d5018ec9d331361bcd6c82bd0d883c109057c2231774115e8b85c0
    Size: 1.20 MB
  5. glusterfs-devel-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: e5a4c71ee90a0e4f6d53ad70b4dedbc8
    SHA-256: 9316536e2a28dbd09bad35eb9271824b0ccd9e87c5c417c77064d83bb5581f80
    Size: 160.88 kB
  6. glusterfs-fuse-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 62124de9b1b4cc6bbf1b6c1c6c37c54e
    SHA-256: b7910a8b88ad3656296518f40a53ebc1e7827131481aa97658c7acdcaddda5ca
    Size: 115.15 kB
  7. glusterfs-libs-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 352fb800c11259922d4f527698e8cf85
    SHA-256: 3ef5f9bcdd00e06dc4eb9832cd19819aa66fec1897792063f44efa8bd4cd19bf
    Size: 356.65 kB
  8. glusterfs-rdma-3.8.4-54.11.AXS4.x86_64.rpm
    MD5: 758b24d49827c7b2cae238309e308641
    SHA-256: 28c582087b1f94dca7ef1c8dcc98c95fe60588c0e1ac73d7baacebec53819b12
    Size: 43.01 kB