A flaw was found in RPC request using gfs3renamereq in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume.
{ "binaries": [ { "binary_name": "glusterfs-client", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-client-dbgsym", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common-dbgsym", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-dbg", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server", "binary_version": "3.4.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server-dbgsym", "binary_version": "3.4.2-1ubuntu1+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "glusterfs-client", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-client-dbgsym", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common-dbgsym", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-dbg", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server", "binary_version": "3.7.6-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server-dbgsym", "binary_version": "3.7.6-1ubuntu1+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "glusterfs-client", "binary_version": "3.13.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-client-dbgsym", "binary_version": "3.13.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common", "binary_version": "3.13.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-common-dbgsym", "binary_version": "3.13.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server", "binary_version": "3.13.2-1ubuntu1+esm1" }, { "binary_name": "glusterfs-server-dbgsym", "binary_version": "3.13.2-1ubuntu1+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }