Skip to content
OpenAdvisories
High RHSA-2019:3255 1 CVE

Red Hat Security Advisory: heketi security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3:client:el7 heketi 0:9.0.0-7.el7rhgs
Red Hat · Gluster Storage 3 storage:3:client:el7 heketi-client 0:9.0.0-7.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 heketi 0:9.0.0-7.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 heketi-client 0:9.0.0-7.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 python-heketi 0:9.0.0-7.el7rhgs

Vulnerabilities 1

  • High 7.3
    CVE-2019-3899

    It was found that default configuration of Heketi does not require any authentication potentially exposing the manageme…

    The Heketi Project heketi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1577803
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1609553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1660681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1701091
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1710080
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1710996
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1725798
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1740884
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3255.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-3899
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3899
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3899