Description
Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 2 | appliance +1 | 2.0.6.0-2.el6rhs | RHSA-2013:1205 |
| Red Hat Gluster Storage 2 | gluster-swift-plugin | 1.0-7 | RHSA-2013:1205 |
| Red Hat Gluster Storage 2 | glusterfs +5 | 3.3.0.14rhs-1.el6rhs | RHSA-2013:1205 |
Advisories 1
- RHSA-2013:1205 Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #6 Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=986516
- RHSA-2013:1205 vendor-advisory