RHSA-2018:1136: Important: glusterfs security update
GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage servers over network interconnections into one large, parallel network file system.Security Fix(es): glusterfs: Privilege escalation via glustersharedstorage when snapshot scheduling is enabled (CVE-2018-1088) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.This issue was discovered by John Strunk (Red Hat).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:1136?
The severity of RHSA-2018:1136 is classified as important.
How do I fix RHSA-2018:1136?
To fix RHSA-2018:1136, update to the latest version of the affected GlusterFS packages, specifically 3.8.4-54.6.el7.
Which packages are affected by RHSA-2018:1136?
Affected packages by RHSA-2018:1136 include glusterfs, glusterfs-api, glusterfs-cli, and others listed in the advisory.
Is RHSA-2018:1136 related to security vulnerabilities?
Yes, RHSA-2018:1136 addresses an important security vulnerability in GlusterFS.
What versions are recommended for RHSA-2018:1136?
The recommended version for resolving RHSA-2018:1136 is 3.8.4-54.6.el7 for various GlusterFS packages.