Skip to content
OpenAdvisories
High RHSA-2018:1269 1 CVE

Red Hat Security Advisory: glusterfs security update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-api 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-api-devel 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-cli 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-client-xlators 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-debuginfo 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-devel 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-fuse 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-libs 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor glusterfs-rdma 0:3.8.4-54.8.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor python-gluster 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-api 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-api-devel 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-cli 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-client-xlators 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-debuginfo 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-devel 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-fuse 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-libs 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 glusterfs-rdma 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3:client:el7 python-gluster 0:3.8.4-54.8.el7
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-api 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-api-devel 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-cli 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-client-xlators 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-debuginfo 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-devel 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-events 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-fuse 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-ganesha 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-geo-replication 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-libs 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-rdma 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-resource-agents 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 glusterfs-server 0:3.8.4-54.8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 python-gluster 0:3.8.4-54.8.el7rhgs

Vulnerabilities 1

  • High 8.0
    CVE-2018-1112

    glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthent…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/articles/3422521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1570891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1269.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1112