stable

glusterfs-4.1.6-1.fc28

FEDORA-2018-af9bd28cf1 created by kkeithle 5 years ago for Fedora 28

4.1.6 GA, security fixes for: CVE-2018-14651 CVE-2018-14652 CVE-2018-14653 CVE-2018-14654 CVE-2018-14659 CVE-2018-14660 CVE-2018-14661

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-af9bd28cf1

This update has been submitted for testing by kkeithle.

5 years ago

This update has been pushed to testing.

5 years ago
User Icon cserpentis commented & provided feedback 5 years ago
karma

works for me in a VM

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for batched by kkeithle.

5 years ago

This update has been submitted for stable by kkeithle.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata
Type
security
Severity
low
Karma
1
Signed
Content Type
RPM
Test Gating
Builds
1
glusterfs-4.1.6-1.fc28
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
5 years ago
in testing
5 years ago
in stable
5 years ago
BZ#1644578 CVE-2018-14661 glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service [fedora-all]
0
0
BZ#1644579 CVE-2018-14652 glusterfs: Buffer overflow in "features/locks" translator allows for denial of service [fedora-all]
0
0
BZ#1644580 CVE-2018-14654 glusterfs: "features/index" translator can create arbitrary, empty files [fedora-all]
0
0
BZ#1644582 CVE-2018-14660 glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion [fedora-all]
0
0
BZ#1644583 CVE-2018-14659 glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service [fedora-all]
0
0
BZ#1644584 CVE-2018-14653 glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message [fedora-all]
0
0
BZ#1644730 CVE-2018-14651 glusterfs: glusterfs server exploitable via symlinks to relative paths [fedora-all]
0
0
glusterfs-4.1.6-1.fc28

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.1.1^202410051618gita37559f on bodhi-web-223-99jbx.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •