Description
The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 3 | augeas +2 | 1.0.0-10.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | ccs +1 | 0.16.2-81.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | check-mk +1 | 1.2.6p1-3.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | clufter +5 | 0.11.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | clustermon +3 | 0.16.2-31.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | cman +4 | 3.0.12.1-73.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | corosync +2 | 1.4.7-2.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | ctdb2.5 | 2.5.5-7.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | fence-virt +5 | 0.2.3-19.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gluster-nagios-addons | 0.2.4-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gluster-nagios-common | 0.2.0-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | glusterfs +9 | 3.7.1-11.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | glusterfs-server +2 | 3.7.1-11.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gstatus | 0.64-3.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | libqb +1 | 0.17.1-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | libvirt-lock-sanlock | 0.10.2-54.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nagios-plugins +4 | 1.4.16-12.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nagios-server-addons | 0.2.1-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nfs-ganesha +2 | 2.2.0-5.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nrpe +1 | 2.15-4.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | openais +2 | 1.1.1-7.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | openstack-swift +5 | 1.13.1-4.el6ost | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pacemaker +7 | 1.1.12-8.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pcs | 0.9.139-9.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pnp4nagios | 0.6.22-2.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pynag +1 | 0.9.1-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pytalloc +3 | 2.1.1-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-blivet | 1:1.0.0.2-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-cpopen | 1.3-4.el6_5 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-eventlet +1 | 0.14.0-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-greenlet +1 | 0.4.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-keystoneclient +1 | 1:0.9.0-5.el6ost | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-prettytable | 0.7.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-pyudev | 0.15-2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | redhat-storage-logos | 60.0.20-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | redhat-storage-server | 3.1.0.3-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | resource-agents +1 | 3.9.5-24.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | userspace-rcu +1 | 0.7.9-2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | vdsm +14 | 4.16.20-1.2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 2 | glusterfs +9 | 3.7.1-11.el5 | RHSA-2015:1495 |
Advisories 1
- RHSA-2015:1495 Red Hat Security Advisory: Red Hat Gluster Storage 3.1 update Red Hat Security Advisories (RHSA) · Aug 8, 2026