Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4

Fixed packages 69

Vulnerabilities 3

• Critical 9.8
  CVE-2012-4406

  OpenStack Object Storage (swift) Code Injection vulnerability

  OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

  swift swift Debian PyPI
  Oct 22, 2012
• Unscored —
  CVE-2012-5635

  The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users…

  glusterfs Debian
  Apr 9, 2013
• Unscored —
  CVE-2012-5638

  The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows l…

  sanlock Debian
  Dec 20, 2012

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/knowledge/docs/Red_Hat_Storage/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=854757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=856206
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=859387
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=869724
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=876679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=883590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=886364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=887010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=895841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=902213
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922572
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=923674
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0691.json
• report
  https://access.redhat.com/security/cve/CVE-2012-4406
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-4406
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-4406
• report
  https://access.redhat.com/security/cve/CVE-2012-5635
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-5635
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-5635
• report
  https://access.redhat.com/security/cve/CVE-2012-5638
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-5638
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-5638