Bug 1644756
Summary: | CVE-2018-14653 glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message [fedora-all] | |||
---|---|---|---|---|
Product: | [Community] GlusterFS | Reporter: | Amar Tumballi <atumball> | |
Component: | core | Assignee: | Amar Tumballi <atumball> | |
Status: | CLOSED CURRENTRELEASE | QA Contact: | ||
Severity: | medium | Docs Contact: | ||
Priority: | medium | |||
Version: | mainline | CC: | anoopcs, bugs, extras-qa, humble.devassy, jonathansteffan, kkeithle, matthias, ndevos, ramkrsna, sisharma, srangana | |
Target Milestone: | --- | Keywords: | Security, SecurityTracking | |
Target Release: | --- | |||
Hardware: | Unspecified | |||
OS: | Unspecified | |||
Whiteboard: | ||||
Fixed In Version: | glusterfs-6.0 | Doc Type: | Release Note | |
Doc Text: | Story Points: | --- | ||
Clone Of: | 1644584 | |||
: | 1647664 1647670 (view as bug list) | Environment: | ||
Last Closed: | 2018-12-26 16:29:15 UTC | Type: | --- | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | 1644584 | |||
Bug Blocks: | 1633431, 1647664, 1647670 |
Description
Amar Tumballi
2018-10-31 14:38:16 UTC
REVIEW: https://review.gluster.org/21528 (glusterd-handshake: prevent a buffer overflow) posted (#1) for review on master by Amar Tumballi REVIEW: https://review.gluster.org/21529 (protocol: remove the option 'verify-volfile-checksum') posted (#1) for review on master by Amar Tumballi REVIEW: https://review.gluster.org/21528 (glusterd-handshake: prevent a buffer overflow) posted (#2) for review on master by Atin Mukherjee REVIEW: https://review.gluster.org/21529 (protocol: remove the option 'verify-volfile-checksum') posted (#2) for review on master by Shyamsundar Ranganathan REVIEW: https://review.gluster.org/21576 (protocol: remove the option 'verify-volfile-checksum') posted (#1) for review on release-5 by Amar Tumballi REVIEW: https://review.gluster.org/21577 (glusterd-handshake: prevent a buffer overflow) posted (#1) for review on release-5 by Amar Tumballi REVISION POSTED: https://review.gluster.org/21576 (protocol: remove the option 'verify-volfile-checksum') posted (#2) for review on release-5 by Amar Tumballi REVISION POSTED: https://review.gluster.org/21577 (glusterd-handshake: prevent a buffer overflow) posted (#2) for review on release-5 by Amar Tumballi This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-6.0, please open a new bug report. glusterfs-6.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution. [1] https://lists.gluster.org/pipermail/announce/2019-March/000120.html [2] https://www.gluster.org/pipermail/gluster-users/ |