Login
Login-Name Passwort


 
Newsletter
Werbung

Sicherheit: Zwei Probleme in heketi
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in heketi
ID: FEDORA-2017-f7cbe22fd8
Distribution: Fedora
Plattformen: Fedora 26
Datum: Do, 11. Januar 2018, 06:03
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15104
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15103
Applikationen: heketi

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2017-f7cbe22fd8
2018-01-10 20:51:05.566880
-------------------------------------------------------------------------------
-

Name : heketi
Product : Fedora 26
Version : 5.0.1
Release : 1.fc26
URL : https://github.com/heketi/heketi
Summary : RESTful based volume management framework for GlusterFS
Description :
Heketi provides a RESTful management interface which can be used to manage
the life cycle of GlusterFS volumes. With Heketi, cloud services like
OpenStack Manila, Kubernetes, and OpenShift can dynamically provision
GlusterFS volumes with any of the supported durability types. Heketi
will automatically determine the location for bricks across the cluster,
making sure to place bricks and its replicas across different failure
domains. Heketi also supports any number of GlusterFS clusters, allowing
cloud services to provide network file storage without being limited to a
single GlusterFS cluster.

-------------------------------------------------------------------------------
-
Update Information:

Security fix for CVE-2017-15103 and CVE-2017-15104
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1510147 - CVE-2017-15103 heketi: OS command injection in heketi
API
https://bugzilla.redhat.com/show_bug.cgi?id=1510147
[ 2 ] Bug #1510149 - CVE-2017-15104 heketi: Information disclosure through
world readable file
https://bugzilla.redhat.com/show_bug.cgi?id=1510149
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade heketi' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Pro-Linux
Unterstützer werden
Neue Nachrichten
Werbung