Summary
[1.18.1-4.0.1]
- Add new content to nbd_connect_uri.pod
[1.18.1-4]
- Fix CVE-2024-7383 NBD server improper certificate validation
resolves: RHEL-52730
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libnbd | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | libnbd-bash-completion | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | libnbd-devel | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | nbdfuse | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | ocaml-libnbd | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | ocaml-libnbd-devel | 0:1.18.1-4.0.1.el9_4 |
| Oracle Linux · 9 | python3-libnbd | 0:1.18.1-4.0.1.el9_4 |
Vulnerabilities 1
-
High 7.4
Libnbd: nbd server improper certificate validation
A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.