Skip to content
OpenAdvisories
Medium RHSA-2019:0265 3 CVEs

Red Hat Security Advisory: Red Hat Gluster Storage Web Administration security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 25

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-collectd-selinux 0:1.5.4-3.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-commons 0:1.6.3-15.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-node-agent 0:1.6.3-15.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-selinux 0:1.5.4-3.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 carbon-selinux 0:1.5.4-3.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 graphite-web 0:1.1.4-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-cachetools 0:1.0.3-1.1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-carbon 0:1.1.4-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-django 0:1.11.15-4.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-django-bash-completion 0:1.11.15-4.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-django-tagging 0:0.4.6-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-scandir 0:1.3-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-scandir-debuginfo 0:1.3-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python-whisper 0:1.1.4-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python2-django 0:1.11.15-4.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 python2-django-doc 0:1.11.15-4.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-ansible 0:1.6.3-11.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-api 0:1.6.3-10.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-api-httpd 0:1.6.3-10.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-commons 0:1.6.3-15.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-grafana-plugins 0:1.6.3-20.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-grafana-selinux 0:1.5.4-3.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-monitoring-integration 0:1.6.3-20.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-node-agent 0:1.6.3-15.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-selinux 0:1.5.4-3.el7rhgs

Vulnerabilities 3

  • Medium 6.1
    CVE-2018-14574 Scanner template EPSS 25%

    Django open redirect

    django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2018-7536

    Django denial-of-service possibility in urlize and urlizetrunc template filters

    An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2018-7537

    Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

    An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catas…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1609031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1654338
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1655424
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1655433
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1658245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1659678
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1660779
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0265.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7536
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7536
  • article
    https://www.djangoproject.com/weblog/2018/mar/06/security-releases/
  • report
    https://access.redhat.com/security/cve/CVE-2018-7537
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7537
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7537
  • report
    https://access.redhat.com/security/cve/CVE-2018-14574
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14574
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14574
  • article
    https://www.djangoproject.com/weblog/2018/aug/01/security-releases/