Red Hat Security Advisory: OCS 3.11.z async security, bug fix, and enhancement update
Updated OpenShift Container Storage packages fixing various security issues and other bugs are now available for Red Hat OpenShift Container Storage with 3.11.z Async update. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-10763US | medium5.5 | — | ||
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read pot… | ||||
| CVE-2020-10762US | medium5.5 | — | ||
An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:4143self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1845067external
- 1845387external
- 1850072external
- 1850077external
- 1850361external
- 1855178external
Behebungen (56)
- Behobengluster-block-0:0.2.1-36.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobengluster-block-0:0.2.1-36.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobengluster-block-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobengluster-block-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobengluster-block-debuginfo-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobengluster-block-debuginfo-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenlibtcmu-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenlibtcmu-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenlibtcmu-devel-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenlibtcmu-devel-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenpython-heketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobenpython-heketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-0:1.2.0-32.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-0:1.2.0-32.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-debuginfo-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Behobentcmu-runner-debuginfo-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4143 - Workaroundgluster-block-0:0.2.1-36.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundgluster-block-0:0.2.1-36.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundgluster-block-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundgluster-block-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundgluster-block-debuginfo-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundgluster-block-debuginfo-0:0.2.1-36.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundheketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundheketi-client-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundlibtcmu-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundlibtcmu-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundlibtcmu-devel-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundlibtcmu-devel-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-heketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundpython-heketi-0:9.0.0-9.5.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtcmu-runner-0:1.2.0-32.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundtcmu-runner-0:1.2.0-32.2.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtcmu-runner-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundtcmu-runner-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtcmu-runner-debuginfo-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Manually change the log files permission to remove readable bits for others, e.g; # chmod 640 /var/log/glusterfs/gluster-block/cmd_history.log NOTE: The above mitigation only restricts access to the other local users. To avoid storing passwords to the log file, kindly update gluster-block to the fixed version.
- Workaroundtcmu-runner-debuginfo-0:1.2.0-32.2.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.5 on RHEL-7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan