Gluster file system is vulnerable to privilege escalation. Remote authenticated attackers with access to mount volumes could elevate their privileges via creating arbitrary, empty files on the target server by manipulating F_XATTROP_ENTRY_IN_KEY
argument.
access.redhat.com/errata/RHSA-2018:3431
access.redhat.com/errata/RHSA-2018:3432
access.redhat.com/errata/RHSA-2018:3470
access.redhat.com/security/cve/CVE-2018-14654
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1631576
bugzilla.redhat.com/show_bug.cgi?id=1632119
bugzilla.redhat.com/show_bug.cgi?id=1643194
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14654
lists.debian.org/debian-lts-announce/2021/11/msg00000.html
security.gentoo.org/glsa/201904-06