glusterfs-3.8.4-54.10.el7

エラータID: AXSA:2018-3234:05

Release date: 
Monday, July 2, 2018 - 01:05
Subject: 
glusterfs-3.8.4-54.10.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

GlusterFS is a key building block of Asianux Gluster Storage. It is based
on a stackable user-space design and can deliver exceptional performance
for diverse workloads. GlusterFS aggregates various storage servers over
network interconnections into one large, parallel network file system.

Security Fix:

* glusterfs: access trusted peer group via remote-host command
(CVE-2018-10841)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

CVE-2018-10841
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2018-10841
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.
Additional Info: 

N/A

Download: 

SRPMS
  1. glusterfs-3.8.4-54.10.el7.src.rpm
    MD5: 57ee591a1ce59067ae0ab15685291201
    SHA-256: 84e13f2f63cb0d30b5d3a8207a7f44bc05b702ae10d9c828eb4c85f4903b0a21
    Size: 9.32 MB

Asianux Server 7 for x86_64
  1. glusterfs-3.8.4-54.10.el7.x86_64.rpm
    MD5: 3fea2b5024469dda52ba4588fd04088d
    SHA-256: 246aa78f4cda09c8d4b11dbe1b7607ff780cffe75274270d1c2da9121a943f6c
    Size: 528.93 kB
  2. glusterfs-api-3.8.4-54.10.el7.x86_64.rpm
    MD5: 45e8871731f6db089263c1d6dc876853
    SHA-256: d8b72366dd5c9ef1a3dba5f537a3aa8101ba53d848da008d3c915e1200f6d897
    Size: 75.61 kB
  3. glusterfs-cli-3.8.4-54.10.el7.x86_64.rpm
    MD5: 52cfda6c849db8fa66ae5922c9f0887e
    SHA-256: 84bc87eb923050399d5b3a84570af3ef2609502ac8bb8409fda72dee71f86618
    Size: 176.29 kB
  4. glusterfs-client-xlators-3.8.4-54.10.el7.x86_64.rpm
    MD5: 9e799d069affea80a2911e5f677e571d
    SHA-256: d8e37a622d33dc3355bc7fa22fb42b90489710f9109869ef1c72d577380cddfd
    Size: 789.79 kB
  5. glusterfs-fuse-3.8.4-54.10.el7.x86_64.rpm
    MD5: d8ff9daa856b7dc4a2006daccfb3693f
    SHA-256: 9930f7a1b52bf547759b46247f631f3629b13f827a201f304ec84ab32eeacdc0
    Size: 120.59 kB
  6. glusterfs-libs-3.8.4-54.10.el7.x86_64.rpm
    MD5: b73ba5d334ed83fd8fe465b7b479ba61
    SHA-256: 7d25ea907e878ebdadd1f64c9d85f3ec2adb9dc497060389ada2d6771523afd8
    Size: 370.13 kB
  7. glusterfs-rdma-3.8.4-54.10.el7.x86_64.rpm
    MD5: bed2133b46aacb348e14bc4523fd2494
    SHA-256: 0b46a39d4b35e0e756e28d53b967da1a867c1a9cdedc881a21d2a125406af833
    Size: 44.95 kB