Red Hat Security Advisories · September 2018 — Red Hat Security Advisories
54 RHSAs 119 CVEs 8 EXPLOITED

Red Hat Security Response Team errata for 2018-09. Mirrored into Vulnetix VDB with downloadable CSAF.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 8 are already weaponised in the wild: see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2018:2669

ExploitedVulnCheck KEV listedHIGH2018-09-11

Red Hat Security Advisory: Fuse 7.1 security update

CVEs:CVE-2014-0114CVE-2016-5397CVE-2016-1000338CVE-2016-1000339CVE-2016-1000340CVE-2016-1000341CVE-2016-1000342CVE-2016-1000343CVE-2016-1000344CVE-2016-1000345CVE-2016-1000346CVE-2016-1000352CVE-2017-14063CVE-2018-1114CVE-2018-1271CVE-2018-1272CVE-2018-1338CVE-2018-1339CVE-2018-8036CVE-2018-8088CVE-2018-1000129CVE-2018-1000130CVE-2018-1000180VAR-201404-0288JVNDB-2014-000056GSD-2014-0114

CSAF Red Hat errata

RHSA-2018:2561

ExploitedVulnCheck KEV listedHIGH2018-09-04

Red Hat Security Advisory: CloudForms 4.6.4 security, bug fix, and enhancement update

CVEs:CVE-2018-3760CVE-2018-10905

Affected products

ProductStatusVendorPackage
cfme-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9
cfme-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-amazon-smartstate-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-amazon-smartstate-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9
cfme-amazon-smartstate-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-amazon-smartstate-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-appliance-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-appliance-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9
cfme-appliance-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-appliance-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-appliance-common-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-appliance-common-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-appliance-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-appliance-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-appliance-tools-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-appliance-tools-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-gemset-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-gemset-0:5.9.4.7-1.el7cf.src as a component of CloudForms Management Engine 5.9
cfme-gemset-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-gemset-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
cfme-gemset-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat cfme-gemset-debuginfo-0:5.9.4.7-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf.src as a component of CloudForms Management Engine 5.9
rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
rh-postgresql95-postgresql-pglogical-debuginfo-0:2.1.0-4.el7cf.x86_64 as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-postgresql95-postgresql-pglogical-debuginfo-0:2.1.0-4.el7cf.x86_64 as a component of CloudForms Management Engine 5.9
rh-ruby23-rubygem-redhat_access_cfme-0:2.0.3-1.el7cf.noarch as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-ruby23-rubygem-redhat_access_cfme-0:2.0.3-1.el7cf.noarch as a component of CloudForms Management Engine 5.9
rh-ruby23-rubygem-redhat_access_cfme-0:2.0.3-1.el7cf.src as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-ruby23-rubygem-redhat_access_cfme-0:2.0.3-1.el7cf.src as a component of CloudForms Management Engine 5.9
rh-ruby23-rubygem-redhat_access_cfme-doc-0:2.0.3-1.el7cf.noarch as a component of CloudForms Management Engine 5.9 fixed Red Hat rh-ruby23-rubygem-redhat_access_cfme-doc-0:2.0.3-1.el7cf.noarch as a component of CloudForms Management Engine 5.9
CSAF Red Hat errata

RHSA-2018:2607

PoC exploitHIGH2018-09-04

Red Hat Security Advisory: Red Hat Gluster Storage security, bug fix, and enhancement update

CVEs:CVE-2018-10904CVE-2018-10907CVE-2018-10911CVE-2018-10913CVE-2018-10914CVE-2018-10923CVE-2018-10926CVE-2018-10927CVE-2018-10928CVE-2018-10929CVE-2018-10930

Affected products

ProductStatusVendorPackage
glusterfs-0:3.12.2-18.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-0:3.12.2-18.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-0:3.12.2-18.el7.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-0:3.12.2-18.el7.src as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-0:3.12.2-18.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-0:3.12.2-18.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-api-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-api-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-api-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-api-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-api-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-api-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-api-devel-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-api-devel-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-api-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-api-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-api-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-api-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-cli-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-cli-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-cli-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-cli-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-cli-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-cli-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-client-xlators-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-client-xlators-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-client-xlators-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-client-xlators-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-client-xlators-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-client-xlators-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-debuginfo-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-debuginfo-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-debuginfo-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-debuginfo-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-debuginfo-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-debuginfo-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-devel-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-devel-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-devel-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-events-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-events-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-fuse-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-fuse-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-fuse-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-fuse-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-fuse-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-fuse-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-ganesha-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-ganesha-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-geo-replication-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-geo-replication-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-libs-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-libs-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-libs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-libs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-libs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-libs-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-rdma-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-rdma-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-rdma-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat glusterfs-rdma-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
glusterfs-rdma-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat glusterfs-rdma-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
glusterfs-resource-agents-0:3.12.2-18.el7rhgs.noarch as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-resource-agents-0:3.12.2-18.el7rhgs.noarch as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
glusterfs-server-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat glusterfs-server-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
python2-gluster-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat python2-gluster-0:3.12.2-18.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
python2-gluster-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7 fixed Red Hat python2-gluster-0:3.12.2-18.el7.x86_64 as a component of Red Hat Storage Native Client for Red Hat Enterprise Linux 7
python2-gluster-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts fixed Red Hat python2-gluster-0:3.12.2-18.el7.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
redhat-release-server-0:7.5-11.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat redhat-release-server-0:7.5-11.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
redhat-release-server-0:7.5-11.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat redhat-release-server-0:7.5-11.el7rhgs.x86_64 as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
redhat-storage-server-0:3.4.0.0-1.el7rhgs.noarch as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat redhat-storage-server-0:3.4.0.0-1.el7rhgs.noarch as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
redhat-storage-server-0:3.4.0.0-1.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7 fixed Red Hat redhat-storage-server-0:3.4.0.0-1.el7rhgs.src as a component of Red Hat Gluster Storage Server 3.4 on RHEL-7
CSAF Red Hat errata

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.