[CLSA-2023:1681151394] Fix CVE(s): CVE-2022-26253

Type:

security

Severity:

Important

Release date:

2023-04-10 18:29:58 UTC

Description:

   * SECURITY UPDATE: stack-based buffer overread in FUSE xlator
     - debian/patches/CVE-2022-26253.patch: access the graph->id
       only while event is associated specific to FUSE xlator.
     - CVE-2022-26253

Updated packages:

glusterfs-client_3.7.6-1ubuntu1+tuxcare.els1_amd64.deb
sha:c43d388357bb3d7a3312947f0c75d9b6c948bd33
glusterfs-common_3.7.6-1ubuntu1+tuxcare.els1_amd64.deb
sha:8b57b3336469cd5f36f56eb8280000a94337bf24
glusterfs-server_3.7.6-1ubuntu1+tuxcare.els1_amd64.deb
sha:e903ee73573b7bf2bca2e080e7777a98cb220a1e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.