4.1.4

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-04	CVE-2018-10904	It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. network low complexity gluster redhat debian opensuse	8.8
2018-06-20	CVE-2018-10841	glusterfs is vulnerable to privilege escalation on gluster server nodes. network low complexity gluster debian	8.8