Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d57f3eb0 by Markus Koschany at 2018-11-04T16:09:26Z
CVE-2018-14654,CVE-2018-14660,glusterfs: Jessie is not affected
CVE-2018-14654: The functions index_entry_create and index_entry_delete do not
exist, neither do GF_XATTROP_ENTRY_IN_KEY and GF_XATTROP_ENTRY_OUT_KEY.
CVE-2018-14660: The function pl_metalk does not exist. There is no mechanism
for checking for a metalock key.
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10428,8 +10428,8 @@ CVE-2018-14661 (It was found that usage of snprintf
function in feature/locks ..
NOTE: https://review.gluster.org/#/c/glusterfs/+/21532/
NOTE:
http://git.gluster.org/cgit/glusterfs.git/commit/?id=74dbf0a9aac4b960832029ec122685b5b5009127
CVE-2018-14660 (A flaw was found in glusterfs server through versions 4.1.4
and 3.1.2 ...)
- {DLA-1565-1}
- glusterfs <unfixed>
+ [jessie] - glusterfs <not-affected> (vulnerable code not present)
NOTE: https://www.openwall.com/lists/oss-security/2018/10/31/5
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1635926
NOTE: https://review.gluster.org/#/c/glusterfs/+/21531/
@@ -10453,8 +10453,8 @@ CVE-2018-14656 (A missing address check in the callers
of the show_opcodes() in
CVE-2018-14655
RESERVED
CVE-2018-14654 (The Gluster file system through version 4.1.4 is vulnerable to
abuse ...)
- {DLA-1565-1}
- glusterfs <unfixed>
+ [jessie] - glusterfs <not-affected> (vulnerable code not present)
NOTE: https://www.openwall.com/lists/oss-security/2018/10/31/5
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1631576
NOTE: https://review.gluster.org/#/c/glusterfs/+/21534/
=====================================
data/DLA/list
=====================================
@@ -1,5 +1,5 @@
[03 Nov 2018] DLA-1565-1 glusterfs - security update
- {CVE-2018-14651 CVE-2018-14652 CVE-2018-14653 CVE-2018-14654
CVE-2018-14659 CVE-2018-14660 CVE-2018-14661}
+ {CVE-2018-14651 CVE-2018-14652 CVE-2018-14653 CVE-2018-14659
CVE-2018-14661}
[jessie] - glusterfs 3.5.2-2+deb8u5
[01 Nov 2018] DLA-1564-1 mono - security update
{CVE-2009-0689}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d57f3eb03e8814c9ad58ed0dc857a6ee3462bbd8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d57f3eb03e8814c9ad58ed0dc857a6ee3462bbd8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
