Red Hat Security Advisory: swiftonfile security update
An updated swiftonfile package that fixes one security issue is now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5242US | medium6.0 | — | ||
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbit… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- Fixedswiftonfile-0:1.13.1-6.el6rhs.noarch as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1918 - Fixedswiftonfile-0:1.13.1-6.el6rhs.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1918 - Fixedswiftonfile-0:1.13.1-6.el7rhgs.noarch as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1918 - Fixedswiftonfile-0:1.13.1-6.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1918
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan