Security update for glusterfs (moderate)

2020-01-2000:00:00

lists.opensuse.org

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

An update that fixes 14 vulnerabilities is now available.

Description:

This update for glusterfs fixes the following issues:

glusterfs was update to release 3.12.15:

Fixed a number of bugs and security issues:

CVE-2018-1088, CVE-2018-1112 [boo#1090084], CVE-2018-10904
[boo#1107018], CVE-2018-10907 [boo#1107019], CVE-2018-10911
[boo#1107020], CVE-2018-10913 [boo#1107021], CVE-2018-10914
[boo#1107022], CVE-2018-10923 [boo#1107023], CVE-2018-10924
[boo#1107024], CVE-2018-10926 [boo#1107025], CVE-2018-10927
[boo#1107026], CVE-2018-10928 [boo#1107027], CVE-2018-10928
[boo#1107027], CVE-2018-10929 [boo#1107028], CVE-2018-10930
[boo#1107029], boo#1105776 .

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-79=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1i586< - openSUSE Leap 15.1 (i586 x86_64):- openSUSE Leap 15.1 (i586 x86_64):.i586.rpm
openSUSE Leap15.1x86_64< - openSUSE Leap 15.1 (i586 x86_64):- openSUSE Leap 15.1 (i586 x86_64):.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	15.1	i586		< - openSUSE Leap 15.1 (i586 x86_64):	- openSUSE Leap 15.1 (i586 x86_64):.i586.rpm
openSUSE Leap	15.1	x86_64		< - openSUSE Leap 15.1 (i586 x86_64):	- openSUSE Leap 15.1 (i586 x86_64):.x86_64.rpm