Skip to content
OpenAdvisories
Medium RHSA-2020:4143 2 CVEs

Red Hat Security Advisory: OCS 3.11.z async security, bug fix, and enhancement update

Published Sep 22, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3:client:el7 heketi 0:9.0.0-9.5.el7rhgs
Red Hat · Gluster Storage 3 storage:3:client:el7 heketi-client 0:9.0.0-9.5.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 gluster-block 0:0.2.1-36.2.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 gluster-block-debuginfo 0:0.2.1-36.2.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 heketi 0:9.0.0-9.5.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 heketi-client 0:9.0.0-9.5.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 libtcmu 0:1.2.0-32.2.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 libtcmu-devel 0:1.2.0-32.2.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 python-heketi 0:9.0.0-9.5.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 tcmu-runner 0:1.2.0-32.2.el7rhgs
Red Hat · Gluster Storage 3 storage:3.5:server:el7 tcmu-runner-debuginfo 0:1.2.0-32.2.el7rhgs

Vulnerabilities 2

  • Medium 5.5
    CVE-2020-10763

    Heketi logs sensitive information

    An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

    github.com/heketi/heketi Go
  • Unscored —
    CVE-2020-10762

    An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850072
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855178
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4143.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10762
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10762
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10762
  • article
    https://github.com/gluster/gluster-block/releases/tag/v0.5.1
  • report
    https://access.redhat.com/security/cve/CVE-2020-10763
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10763
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10763
  • article
    https://github.com/heketi/heketi/releases/tag/v10.1.0