Bug 22924 - glusterfs new security issue CVE-2018-1088
Summary: glusterfs new security issue CVE-2018-1088
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: All Packagers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-04-18 17:39 CEST by David Walser
Modified: 2018-04-19 14:31 CEST (History)
3 users (show)

See Also:
Source RPM: glusterfs-3.7.9-1.mga6.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2018-04-18 17:39:43 CEST
RedHat has issued an advisory today (April 18):
https://access.redhat.com/errata/RHSA-2018:1136
Comment 1 Marja Van Waes 2018-04-18 21:46:07 CEST
Assigning to all packagers collectively, since there is no registered maintainer for this package.

CC: (none) => marja11
Assignee: bugsquad => pkg-bugs

Comment 2 Marja Van Waes 2018-04-18 21:51:27 CEST
It was obsoleted 11 months ago

http://svnweb.mageia.org/packages/obsolete/glusterfs/releases/3.7.9/

Resolution: (none) => INVALID
Status: NEW => RESOLVED

Comment 3 David Walser 2018-04-19 13:37:00 CEST
Not correctly.  The package "python-gluster" was not obsoleted.  It was entered into task-obsolete incorrectly as "python-glusterfs"

Since we're updating task-obsolete for the Plasma update, let's fix it there.

Status: RESOLVED => REOPENED
Resolution: INVALID => (none)
CC: (none) => geiger.david68210, mageia

Comment 4 David GEIGER 2018-04-19 14:03:18 CEST
Done!
Comment 5 David Walser 2018-04-19 14:31:33 CEST
Thanks!

Resolution: (none) => FIXED
Status: REOPENED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.