Scientific Linux Security Update : libvirt on SL7.x x86_64 (20190620)

Security Fixes : - libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API CVE-2019-10161 - libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients CVE-2019-10166 - libvirt: arbitrary command execution via virConnectGetDomainCapabilities API CVE-2019-10167 - libvirt:...

libvirt security update

CentOS Errata and Security Advisory CESA-2019:1579 An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: libvirt security and bug fix update

An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1723)

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System. IBM has released Version 2.2.5.3 for IBM PureApplication System, in response to CVE-2018-1723. IBM PureApplication System provides a GPFS pattern and addressed the applicable CVE. Vulnerability...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1783) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication System, in response to CVE-2018-1783. IBM PureApplication System provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1723) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication System, in response to CVE-2018-1723. IBM PureApplication System provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1723) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication Service, in response to CVE-2018-1723. IBM PureApplication Service provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1783) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication Service, in response to CVE-2018-1783. IBM PureApplication Service provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1783)

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service. IBM has released Version 2.2.5.3 for IBM PureApplication Service, in response to CVE-2018-1783. IBM PureApplication Service provides a GPFS pattern and addressed the applicable CVE. Vulnerability...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1783)

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System. IBM has released Version 2.2.5.3 for IBM PureApplication System, in response to CVE-2018-1783. IBM PureApplication System provides a GPFS pattern and addressed the applicable CVE. Vulnerability...

Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1723)

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service. IBM has released Version 2.2.5.3 for IBM PureApplication Service, in response to CVE-2018-1723. IBM PureApplication Service provides a GPFS pattern and addressed the applicable CVE. Vulnerability...

CVE-2018-1993

CVE-2018-1993 affects IBM Spectrum Scale (GPFS) when Local Read Only Cache (LROC) is enabled, potentially causing a read operation to return data from a different file. The issue is reported across multiple releases of IBM Spectrum Scale/Elastic Storage Server, including ESS 4.0.x–4.6.0, ESS 4.5....

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

Default configuration

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

Security Bulletin: The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale (CVE-2018-1782)

Summary The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale which could allow a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS...

Security Bulletin: The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale (CVE-2018-1783)

Summary The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale which could allow an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS CVE-2018-1783. Vulnerability Details CVEID:...

Security Bulletin: IBM Spectrum Scale for IBM Elastic Storage Server is affected by a vulnerability which could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node (CVE-2018-1723)

Summary The Elastic Storage Server are affected by a vulnerability in IBM Spectrum Scale could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node CVE-2018-1723. Vulnerability Details CVEID: CVE-2018-1723 DESCRIPTION: IBM Spectrum...

Security Bulletin : IBM Storwize V7000 Unified is affected by multiple GSKit vulnerabilities in GPFS

Summary A fix is available for IBM Storwize V7000 Unified, for GPFS security vulnerabilities Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM Storwize V7000 Unified. CVEID: CVE-2018-1431 DESCRIPTION: A vulnerability in GSKi...