Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
98
security advisorymoderatememory issueRed Hat OpenShift 2.8 RHSA-2023:2728-01 Moderate: Memory Growth Fix
Updated Red Hat OpenShift Distributed Tracing 2.8 container images are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenShift Distributed Tracing 2.8.0 security update Advisory ID: RHSA-2023:2728-01 Product: Red Hat OpenShift distributed tracing Advisory URL: https://access.redhat.com/errata/RHSA-2023:2728 Issue date: 2023-05-10 CVE Names: CVE-2022-41717 CVE-2023-0361 ==================================================================== 1. Summary: Updated Red Hat OpenShift Distributed Tracing 2.8 container images are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: The Red Hat OpenShift Distributed Tracing 2.8 container images have been updated. CVE-2022-41717 was fixed as part of this release. Users of Red Hat OpenShift Distributed Tracing 2.8 container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs, and add these enhancements. Tempo Operator added as Tech Preview. You can find images updated by this advisory in Red Hat Container Catalog (see References). Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, see the CVE page(s) listed in the References section. 3. Solution: Before applying this update, make sure allpreviously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 4. Bugs fixed (https://bugzilla.redhat.com/): 2161274 - CVE-2022-41717 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 5. References: https://access.redhat.com/security/cve/CVE-2022-41717 https://access.redhat.com/security/cve/CVE-2023-0361 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/containers 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZFwufdzjgjWX9erEAQgEhg/9F1FgVrYKXv/1yvm6waeNwufhvURQKmKe N5U7p6MjMF/P8zYNTsMhojhyt6Ai50CsjvpeJUoMFF01TfQuYpPVgX3jASXPq/I1 px2Vz5+tjiwIzNmUCi9XwugCiWtD/W4kLPL7EueiiU/gFsNMqJmZyAVGJPpTQUTu DYfFJhigOauXSci205RVL/ypiS7geWg/zOhREJ7eAyqyVQBsHqJuVNIgU+90NKyL I1BHrLw6pQDWBV5ZpGcnMdIOqu1OMHAP+d47rK+PzGwyMIt62NwlThekwulubJzp dfK8i/kpNOMGaxDOdwoF+9SiltHIRJgokqWNbIM72CKRmg9/ckqj8v8i2+ARepaq PVZ8IwWiPdNxWrU4sCqDvXVPG+jOLA0lWeEWLsqGl7QtP7k1rGo08WBjk/EuCWM1 Ya0xRKucX2nRpCCOJr9WutnZTOBXO/DGxYWIO/r+ImtITcRv4B3QZBy+kEm9B+aa guAf4sVX8bcjcbw5nuPs5vi+NqB7vbCat9VYT4iI99J9HB8N+8vCdvsN1fTYfoNh mApmD1y7n6rsyJLZPeoNkhDEQv40cx0PjttyM99qA+p3RERAuoPM8v8+CPd8EMqx kpTqjh+kf+9bKKV++Z0pQ0DzbtcmXgmTpRQk7wAhwhSH9oMQn5o7si2jKSZraMbL vU3W6wCKf9o=46Z5 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 10, 2023
Red Hat
98
security advisorysecurity issueRed HatRed Hat: RHSA-2022:7055 Moderate: Security Update for OpenShift 2.6.0
An update is now available for Red Hat Openshift distributed tracing 2.6.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: RHOSDT 2.6.0 operator/operand containers Security Update Advisory ID: RHSA-2022:7055-01 Product: RHOSDT Advisory URL: https://access.redhat.com/errata/RHSA-2022:7055 Issue date: 2022-10-19 CVE Names: CVE-2015-20107 CVE-2021-3918 CVE-2022-0391 CVE-2022-0536 CVE-2022-1292 CVE-2022-1586 CVE-2022-1650 CVE-2022-1785 CVE-2022-1897 CVE-2022-1927 CVE-2022-2068 CVE-2022-2097 CVE-2022-24785 CVE-2022-31129 CVE-2022-32206 CVE-2022-32208 CVE-2022-34903 ==================================================================== 1. Summary: An update is now available for Red Hat Openshift distributed tracing 2.6.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: This release of Red Hat OpenShift distributed tracing provides these changes: Security Fix(es): * nodejs-json-schema: Prototype pollution vulnerability (CVE-2021-3918) * eventsource: Exposure of Sensitive Information (CVE-2022-1650) * moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129) * follow-redirects: Exposure of Sensitive Information via Authorization Header leak (CVE-2022-0536) * Moment.js: Path traversal in moment.locale (CVE-2022-24785) For more details about the security issue(s),including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2024702 - CVE-2021-3918 nodejs-json-schema: Prototype pollution vulnerability 2053259 - CVE-2022-0536 follow-redirects: Exposure of Sensitive Information via Authorization Header leak 2072009 - CVE-2022-24785 Moment.js: Path traversal in moment.locale 2085307 - CVE-2022-1650 eventsource: Exposure of Sensitive Information 2105075 - CVE-2022-31129 moment: inefficient parsing algorithm resulting in DoS 5. References: https://access.redhat.com/security/cve/CVE-2015-20107 https://access.redhat.com/security/cve/CVE-2021-3918 https://access.redhat.com/security/cve/CVE-2022-0391 https://access.redhat.com/security/cve/CVE-2022-0536 https://access.redhat.com/security/cve/CVE-2022-1292 https://access.redhat.com/security/cve/CVE-2022-1586 https://access.redhat.com/security/cve/CVE-2022-1650 https://access.redhat.com/security/cve/CVE-2022-1785 https://access.redhat.com/security/cve/CVE-2022-1897 https://access.redhat.com/security/cve/CVE-2022-1927 https://access.redhat.com/security/cve/CVE-2022-2068 https://access.redhat.com/security/cve/CVE-2022-2097 https://access.redhat.com/security/cve/CVE-2022-24785 https://access.redhat.com/security/cve/CVE-2022-31129 https://access.redhat.com/security/cve/CVE-2022-32206 https://access.redhat.com/security/cve/CVE-2022-32208 https://access.redhat.com/security/cve/CVE-2022-34903 https://access.redhat.com/security/updates/classification#moderate 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY1BkhtzjgjWX9erEAQgc3A//S16S+mYr+0uhv7fBfHt1dRBkY6hManvF jvEIqy7HvrpaUI8aL7M7YA/NEinnqWwcqNKL5P0EhT03ZSCQkJYoN0PXWaH3QzDo o49VzI/V7V3x6lJmA1Uzq24jyU6Uu0xa2wYYuwjy1vpNa1sx60uMzhMn5enk0URG RqyrLVcx4O0Tdypnx2coDnVXQOA62en+gITpOxY5gjywKeOIV9ksejvaaA//NTL+ K8LMmCobj+qmUhduX17OHfH7GgrXdWNNLVOZ+LcAr8NtUAtyUOddliwjFUO9Je+7 1dTtvNyB8+scPZOvYiuGeRPtS/EZLu3AGSIeKNGGB8hDqB6iMMx4HoZg9MT23kd7 qzbh6tEMdIUI47Sq5x7CrTW9HvSQ04XYbhA3MfaRzxjao1VDQaMSW5RnJcLqD7WS /lJv4pqNdUxNgZGLxNjym1ZcskSjWh3KgetYcOiHfPyFT4195i5uWcLDJk7RLD8X 1ikbWzHqrliGTTiD5ml/nv4IL7dPjcL9ENC/p9+C/bZqR5I8WgKBigDkYQdyoCrT cpVa0UPsz08HtMA208Df8QkCehI3g0qPedV2PpRt/XokKMEP6eMEgd1sFYiOljYN BWSDLQWec9+7QqDWpTtwFUU9C3VaGaaau4LVYehmYLl3uXQzfaxjWzSntdhqDtc9 2U9smIGtonA=uOMp -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 19, 2022
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!