RHSA-2015:1845 - Security Advisory

Topic

Red Hat Gluster Storage 3.1 Update 1, which fixes one security issue,
several bugs, and adds various enhancements, is now available for Red Hat
Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

Red Hat Gluster Storage is a software only scale-out storage solution that
provides flexible and affordable unstructured data storage. It unifies data
storage and infrastructure, increases performance, and improves
availability and manageability to meet enterprise-level storage challenges.

Red Hat Gluster Storage's Unified File and Object Storage is built on
OpenStack's Object Storage (swift).

A flaw was found in the metadata constraints in Red Hat Gluster Storage's
OpenStack Object Storage (swiftonfile). By adding metadata in several
separate calls, a malicious user could bypass the max_meta_count
constraint, and store more metadata than allowed by the configuration.
(CVE-2014-8177)

This update also fixes numerous bugs and adds various enhancements. Space
precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Gluster Storage 3.1 Technical Notes, linked to in
the References section, for information on the most significant of these
changes.

This advisory introduces the following new features:

• Gdeploy is a tool which automates the process of creating, formatting,

and mounting bricks. When setting up a fresh cluster, gdeploy could be the
preferred choice of cluster set up, as manually executing numerous commands
can be error prone. The advantages of using gdeploy includes automated
brick creation, flexibility in choosing the drives to configure (sd, vd,
etc.), and flexibility in naming the logical volumes (LV) and volume groups
(VG). (BZ#1248899)

• The gstatus command is now fully supported. The gstatus command provides

an easy-to-use, high-level view of the health of a trusted storage pool
with a single command. It gathers information about the health of a Red Hat
Gluster Storage trusted storage pool for distributed, replicated,
distributed-replicated, dispersed, and distributed-dispersed volumes.
(BZ#1250453)

• You can now recover a bad file detected by BitRot from a replicated

volume. The information about the bad file will be logged in the scrubber
log file located at /var/log/glusterfs/scrub.log. (BZ#1238171)

• Two tailored tuned profiles are introduced to improve the performance for

specific Red Hat Gluster Storage workloads. They are: rhgs-sequential-io,
which improves performance of large files with sequential I/O workloads,
and rhgs-random-io, which improves performance of small files with random
I/O workloads (BZ# 1251360)

All users of Red Hat Gluster Storage are advised to apply this update.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 6 x86_64
• Red Hat Gluster Storage Nagios Server 3 for RHEL 6 x86_64

Fixes

• BZ - 1027723 - Quota: volume-reset shouldn't remove quota-deem-statfs, unless explicitly specified, when quota is enabled.
• BZ - 1064265 - quota: allowed to set soft-limit %age beyond 100%
• BZ - 1076033 - Unknown Key: <bricks> are reported when the glusterd was restarted
• BZ - 1091936 - Incase of ACL not set on a file, nfs4_getfacl should return a default acl
• BZ - 1134288 - "Unable to get transaction opinfo for transaction ID" error messages in glusterd logs
• BZ - 1178100 - [USS]: gluster volume reset <vol-name>, resets the uss configured option but snapd process continues to run
• BZ - 1213893 - rebalance stuck at 0 byte when auth.allow is set
• BZ - 1215816 - 1 mkdir generates tons of log messages from dht and disperse xlators
• BZ - 1225452 - [remove-brick]: Creation of file from NFS writes to the decommissioned subvolume and subsequent lookup from fuse creates a link
• BZ - 1226665 - gf_store_save_value fails to check for errors, leading to emptying files in /var/lib/glusterd/
• BZ - 1226817 - nfs-ganesha: new volume creation tries to bring up glusterfs-nfs even when nfs-ganesha is already on
• BZ - 1227724 - Quota: Used space of the volume is wrongly calculated
• BZ - 1227759 - Write performance from a Windows client on 3-way replicated volume decreases substantially when one brick in the replica set is brought down
• BZ - 1228135 - [Bitrot] Gluster v set <volname> bitrot enable command succeeds , which is not supported to enable bitrot
• BZ - 1228158 - nfs-ganesha: error seen while delete node "Error: unable to create resource/fence device 'nfs5-cluster_ip-1', 'nfs5-cluster_ip-1' already exists on this system"
• BZ - 1229606 - Quota: " E [quota.c:1197:quota_check_limit] 0-ecvol-quota: Failed to check quota size limit" in brick logs
• BZ - 1229621 - Quota: Seeing error message in brick logs "E [posix-handle.c:157:posix_make_ancestryfromgfid] 0-vol0-posix: could not read the link from the gfid handle /rhs/brick1/b1/.glusterfs/a3/f3/a3f3664f-df98-448e-b5c8-924349851c7e (No such file or directory)"
• BZ - 1231080 - Snapshot: When soft limit is reached, auto-delete is enable, create snapshot doesn't logs anything in log files
• BZ - 1232216 - [geo-rep]: UnboundLocalError: local variable 'fd' referenced before assignment
• BZ - 1232569 - [Backup]: Glusterfind list shows the session as corrupted on the peer node
• BZ - 1234213 - [Backup]: Password of the peer nodes prompted whenever a glusterfind session is deleted.
• BZ - 1234399 - `gluster volume heal <vol-name> split-brain' changes required for entry-split-brain
• BZ - 1234610 - ACL created on a dht.linkto file on a files that skipped rebalance
• BZ - 1234708 - Volume option cluster.enable-shared-storage is not listed in "volume set help-xml" output
• BZ - 1235182 - quota: marker accounting miscalculated when renaming a file on with write is in progress
• BZ - 1235571 - snapd crashed due to stack overflow
• BZ - 1235971 - nfs-ganesha: ganesha-ha.sh --status is actually same as "pcs status"
• BZ - 1236038 - Data Loss:Remove brick commit passing when remove-brick process has not even started(due to killing glusterd)
• BZ - 1236546 - [geo-rep]: killing brick from replica pair makes geo-rep session faulty with Traceback "ChangelogException"
• BZ - 1236672 - quota: brick crashes when create and remove performed in parallel
• BZ - 1236990 - glfsheal crashed
• BZ - 1238070 - snapd/quota/nfs runs on the RHGS node, even after that node was detached from trusted storage pool
• BZ - 1238071 - Quota: Quota Daemon doesn't start after node reboot
• BZ - 1238111 - Detaching a peer from the cluster doesn't remove snap related info and peer probe initiated from that node fails
• BZ - 1238116 - Gluster-swift object server leaks fds in failure cases (when exceptions are raised)
• BZ - 1238118 - nfs-ganesha: coredump for ganesha process post executing the volume start twice
• BZ - 1238147 - Object expirer daemon times out and raises exception while attempting to expire a million objects
• BZ - 1238171 - Not able to recover the corrupted file on Replica volume
• BZ - 1238398 - Unable to examine file in metadata split-brain after setting `replica.split-brain-choice' attribute to a particular replica
• BZ - 1238977 - Scrubber log should mark file corrupted message as Alert not as information
• BZ - 1239021 - AFR: gluster v restart force or brick process restart doesn't heal the files
• BZ - 1239075 - [geo-rep]: rename followed by deletes causes ESTALE
• BZ - 1240614 - Gluster nfs started running on one of the nodes of ganesha cluster, even though ganesha was running on it
• BZ - 1240657 - Deceiving log messages like "Failing STAT on gfid : split-brain observed. [Input/output error]" reported
• BZ - 1241385 - [Backup]: Glusterfind pre attribute '--output-prefix' not working as expected in case of DELETEs
• BZ - 1241761 - nfs-ganesha: coredump "pthread_spin_lock () from /lib64/libpthread.so.0"
• BZ - 1241807 - Brick crashed after a complete node failure
• BZ - 1241862 - EC volume: Replace bricks is not healing version of root directory
• BZ - 1241871 - Symlink mount fails for nfs-ganesha volume
• BZ - 1242803 - Quota list on a volume hangs after glusterd restart an a node.
• BZ - 1243542 - [RHEV-RHGS] App VMs paused due to IO error caused by split-brain, after initiating remove-brick operation
• BZ - 1243722 - glusterd crashed when a client which doesn't support SSL tries to mount a SSL enabled gluster volume
• BZ - 1243886 - huge mem leak in posix xattrop
• BZ - 1244415 - Enabling management SSL on a gluster cluster already configured can crash glusterd
• BZ - 1244527 - DHT-rebalance: Rebalance hangs on distribute volume when glusterd is stopped on peer node
• BZ - 1245162 - python-argparse not installed as a dependency package
• BZ - 1245165 - Some times files are not getting signed
• BZ - 1245536 - [RHGS-AMI] Same UUID generated across instances
• BZ - 1245542 - quota/marker: errors in log file 'Failed to get metadata for'
• BZ - 1245897 - gluster snapshot status --xml gives back unexpected non xml output
• BZ - 1245915 - snap-view:mount crash if debug mode is enabled
• BZ - 1245919 - USS: Take ref on root inode
• BZ - 1245924 - [Snapshot] Scheduler should check vol-name exists or not before adding scheduled jobs
• BZ - 1246946 - critical message seen in glusterd log file, when detaching a peer, but no functional loss
• BZ - 1247445 - [upgrade] After in-service software upgrade from RHGS 2.1 to RHGS 3.1, self-heal daemon is not coming online
• BZ - 1247537 - yum groups for RHGS Server and Console are listed under Available Language Groups instead of Available groups
• BZ - 1248899 - [Feature 3.1.1 gdeploy] Develop tool to setup thinp backend and create Gluster volumes
• BZ - 1249989 - [GSS] python-gluster packages not being treated as dependent package for gluster-swift packages
• BZ - 1250453 - [Feature]: Qualify gstatus to 3.1.1 release
• BZ - 1250821 - [RHGS 3.1 RHEL-7 AMI] RHEL-7 repo disabled by default, NFS and samba repos enabled by default
• BZ - 1251360 - Update RHGS tuned profiles for RHEL-6
• BZ - 1251925 - .trashcan is listed as container and breaks object expiration in gluster-swift
• BZ - 1253141 - [RHGS-AMI] RHUI repos not accessible on RHGS-3.1 RHEL-7 AMI
• BZ - 1254432 - gstatus: Overcommit field show wrong information when one of the node is down
• BZ - 1254514 - gstatus: Status message doesn;t show the storage node name which is down
• BZ - 1254866 - gstatus: Running gstatus with -b option gives error
• BZ - 1254991 - gdeploy: unmount doesn't remove fstab entries
• BZ - 1255015 - gdeploy: unmount fails with fstype parameter
• BZ - 1255308 - Inconsistent data returned when objects are modified from file interface
• BZ - 1255471 - [libgfapi] crash when NFS Ganesha Volume is 100% full
• BZ - 1257099 - gdeploy: checks missing for brick mounts when there are existing physical volumes
• BZ - 1257162 - gdeploy: volume force option doesn't work as expected
• BZ - 1257468 - gdeploy: creation of thin pool stuck after brick cleanup
• BZ - 1257509 - Disperse volume: df -h on a nfs mount throws Invalid argument error
• BZ - 1257525 - CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced
• BZ - 1258434 - gdeploy: peer probe issues during an add-brick operation with fresh hosts
• BZ - 1258810 - gdeploy: change all references to brick_dir in config file
• BZ - 1258821 - gdeploy: inconsistency in the way backend setup and volume creation uses brick_dirs value
• BZ - 1259750 - DHT: Few files are missing after remove-brick operation
• BZ - 1260086 - snapshot: from nfs-ganesha mount no content seen in .snaps/<snapshot-name> directory
• BZ - 1260982 - gdeploy: ENOTEMPTY errors when gdeploy fails
• BZ - 1262236 - glusterd: disable ping timer b/w glusterd and make epoll thread count default 1
• BZ - 1262291 - `getfattr -n replica.split-brain-status <file>' command hung on the mount
• BZ - 1263094 - nfs-ganesha crashes due to usage of invalid fd in glfs_close
• BZ - 1263581 - nfs-ganesha: nfsd coredumps once quota limits cross while creating a file larger than the quota limit set
• BZ - 1263653 - dht: Avoid double unlock in dht_refresh_layout_cbk

CVEs

• CVE-2014-8177
• CVE-2015-1856

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-US/Red_Hat_Storage/3.1/html/Technical_Notes/index.html