Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
98

Red Hat OpenStack 16.2 RHSA-2023:3445-01 Important Etcd Security Fix

An update for etcd is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform 16.2 (etcd) security update Advisory ID: RHSA-2023:3445-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2023:3445 Issue date: 2023-06-05 CVE Names: CVE-2021-28235 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725 CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 ==================================================================== 1. Summary: An update for etcd is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.2 - ppc64le, x86_64 3. Description: A highly-available key value store for shared configuration Security Fix(es): * Information discosure via debug function (CVE-2021-28235) * html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * crypto/tls: large handshake records may cause panics (CVE-2022-41724) * net/http mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * net/http net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * net/http net/textprotomime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * go/parser: Infinite loop in parsing (CVE-2023-24537) * html/template: backticks not treated as string delimiters(CVE-2023-24538) * html/template: improper sanitization of CSS values (CVE-2023-24539) * html/template: improper handling of empty HTML attributes (CVE-2023-29400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2178358 - CVE-2022-41723 net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 2178488 - CVE-2022-41725 golang: net/http, mime/multipart: denial of service from excessive resource consumption 2178492 - CVE-2022-41724 golang: crypto/tls: large handshake records may cause panics 2184441 - CVE-2021-28235 etcd: Information discosure via debug function 2184481 - CVE-2023-24538 golang: html/template: backticks not treated as string delimiters2184482 - CVE-2023-24536 golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 2184483 - CVE-2023-24534 golang: net/http, net/textproto: denial of service from excessive memory allocation 2184484 - CVE-2023-24537 golang: go/parser: Infinite loop in parsing 2196026 - CVE-2023-24539 golang: html/template: improper sanitization of CSS values 2196027 - CVE-2023-24540 golang: html/template: improper handling of JavaScript whitespace 2196029 - CVE-2023-29400 golang: html/template: improper handling of empty HTML attributes 6. Package List: Red Hat OpenStack Platform16.2: Source: etcd-3.3.23-14.el8ost.src.rpm ppc64le: etcd-3.3.23-14.el8ost.ppc64le.rpm etcd-debuginfo-3.3.23-14.el8ost.ppc64le.rpm etcd-debugsource-3.3.23-14.el8ost.ppc64le.rpm x86_64: etcd-3.3.23-14.el8ost.x86_64.rpm etcd-debuginfo-3.3.23-14.el8ost.x86_64.rpm etcd-debugsource-3.3.23-14.el8ost.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-28235 https://access.redhat.com/security/cve/CVE-2022-41723 https://access.redhat.com/security/cve/CVE-2022-41724 https://access.redhat.com/security/cve/CVE-2022-41725 https://access.redhat.com/security/cve/CVE-2023-24534 https://access.redhat.com/security/cve/CVE-2023-24536 https://access.redhat.com/security/cve/CVE-2023-24537 https://access.redhat.com/security/cve/CVE-2023-24538 https://access.redhat.com/security/cve/CVE-2023-24539 https://access.redhat.com/security/cve/CVE-2023-24540 https://access.redhat.com/security/cve/CVE-2023-29400 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZH53s9zjgjWX9erEAQgpwxAAkfstwwUD75m6f/Qmmdi67+HgVXAPNFvi LPekOWmrHirPvoahQKPczenMI4bSFOfGdSFrlPVVCjYqN4OJKrfbRDGy5OwQrSPn tSohg6rNm0Wwsq0GxKtMj4L8OR3eBXYKe7oSDBw6V2eiD385T4fnxBKYg7MFJPM0 yEmop8Ti7WWq1znasXkKmgoOWOGKGBhM+6rYXPvijY02edLn1P52DhVyCZMP/f2+ Al7jkf1esytYboGzLAczvELoQruQeKFw/Cg58fABz60jTmtcY5Hm8KEuUyHGDdvK 9ZfbWpvO9I8HJ/t/pBbyrA9WGhgPeQji6ObkmD2s8UPL3VSAr0GuFFqsivD9FvnS XH5JNqktY5S8ge6aTXDKQYb5x5gZ05Ab0z7MC8j4amqhdjM9aY1W09I4O6w9UJWI 8zc7z6+G5fHsFDtrGlnLt8V0eedbLpowrNG31AVs5cSzPTZa9tIBMiset0X0jad1 489WmjsgiaFpOaIcyscm2f++k/0mkfHxq536mnlnZQHdsQ9PstmHndZOlH0fLFAd nW+SE1rC5ms8CjGXzPMigyRm8p3+UK1lgik1c4PIcWCb2CD92F6mukOJK5gBH0zE t34a708eSFY6KY5Sy9kq6r3urU2i2sjbNHhQMKEx0J5tAXhvqCPgmenxc7S/tjmn szAz6pricSc=3Mtd -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest version 16.2 of Red Hat OpenStack Platform introduces essential security patches for etcd, tackling several significant vulnerabilities.. Red Hat OpenStack 16.2, etcd Updates, Red Hat Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 06, 2023 Important Red Hat
98

Red Hat OpenStack 17.0 RHSA-2023:1014-01 Important: Etcd CPU Abuse Fix

An update for etcd is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform 17.0 (etcd) security update Advisory ID: RHSA-2023:1014-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2023:1014 Issue date: 2023-02-28 CVE Names: CVE-2022-3064 ==================================================================== 1. Summary: An update for etcd is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 17.0 - x86_64 3. Description: A highly-available key value store for shared configuration Security Fix(es): * Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2163037 - CVE-2022-3064 go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents 6. Package List: Red Hat OpenStack Platform17.0: Source: etcd-3.4.14-3.el9ost.src.rpm x86_64: etcd-3.4.14-3.el9ost.x86_64.rpm etcd-debuginfo-3.4.14-3.el9ost.x86_64.rpm etcd-debugsource-3.4.14-3.el9ost.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-3064 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY/5H9tzjgjWX9erEAQghrQ/+KbhJ/TNZPgbLL89L/Elf8BHt0TQ8jmF5 dDuKuCaYsimX13+qgYEugSeHkPm7CfWf11pNjKiHe8eqHzyR08FsHCifXfXaIom5 5uukTSkB0YmlGerwk1Tf5tCaGlMfD+KsfRIvjZIuMq/XIJqA3zb7XvoLSuoU1FKE 6EiXupTYv3FAzPdoxN0QoY5bJYUfbXYgeF7ZxtRovjDuD5xbd1Bs9zliSRLu8vhB +QaQ5BKnEsXwUrbocEVIv7cKH2TrLAr2txsNDvoaKoPL4wVJPaDO+7S6RMisnl9l iM3OqXHeK0r9n3ld8kWqr8IpVPZVjLrU4dAD5XbGoJhjydxmIOtfAiSKc4kkyrEs sH3jikYwiTPMNHbih+uu6MZ/DXbW/7jsM0Va09liTFgv2l1FEO1C6L4w3cZldqOZ s+33+xEHyaP5iHC1Ut1Esurw4rZrlnisd5hdWLEVDX1/H7bmxvHrAzRD1xRcrLeY h4T8obTbWWaqvHTUD1dQSSI03v/wUKtRvHWXNZcP4R8euZYX+nLhaagcl+uFAY26 91NDIQoMr5S9ylLUzCPLia7LFSRv5/+i1DZqih+z1D7fyKpO0//yTvRQhbNI0DLt cl8BAqxvWgvH1Kl+197CLXGPRpMrvOtyibd62KUYBRSHn6CcFAJarbCJdCJHSGKR /MZm9dZryu0=FbFk -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical's significant announcement concerns a Kubernetes upgrade for Ubuntu 22.04, targeting network security flaws related to DNS. . Red Hat OpenStack, etcd Update, Security Impact. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 28, 2023 Important Red Hat
98

Red Hat OpenStack Platform 16.1 RHSA-2022:6066-01 Important: Etcd Update

An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform 16.1 (etcd) security update Advisory ID: RHSA-2022:6066-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:6066 Issue date: 2022-08-15 CVE Names: CVE-2022-21698 CVE-2022-30631 ==================================================================== 1. Summary: An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.1 - ppc64le, x86_64 3. Description: The etcd packages provide a highly available key-value store for shared configuration. Security Fix(es): * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2045880 - CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter 2107342 -CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read 6. Package List: Red Hat OpenStack Platform 16.1: Source: etcd-3.3.23-10.el8ost.src.rpm ppc64le: etcd-3.3.23-10.el8ost.ppc64le.rpm etcd-debuginfo-3.3.23-10.el8ost.ppc64le.rpm etcd-debugsource-3.3.23-10.el8ost.ppc64le.rpm x86_64: etcd-3.3.23-10.el8ost.x86_64.rpm etcd-debuginfo-3.3.23-10.el8ost.x86_64.rpm etcd-debugsource-3.3.23-10.el8ost.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-21698 https://access.redhat.com/security/cve/CVE-2022-30631 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYvo23NzjgjWX9erEAQhJ9w//RBbgT6wIwGU09lyTf4OIK5aYeDodCA1W FJSxMuBJYrCQx0esUTlqBruCVuqe4YgGjJ/9HgzkRCPbEIXGclYFz6/1FkZCOTmu OvT2km1xSCs+EggHOJQ6fJIhpqF1qll1/W2zAEmd0k4AxBRuWRVGIwqkKw6G9Ep6 Qs7g0/mni1xqIe+sX2Pw2stZCGxb1GZ1x5kXrVfAO/Hp2/6HxEun4jBKuLJ9bneb PHsS3QzBARhUHE7Yd+UQ8awbQFXK5Hm/vx/aF3nTzgDy5fWTMh6K6+N059TE1Vdw HdqjiSleqWpN4cKmu1xFOvjXSfoSgbJ5KmFNQR3LSj+v+sQSyYItdqjHo8u4pO8D rcj1MC30M3IcMBahmEiEZIpaImfERCAM0muGzQON9d1FRiND5WQW8tLBMLRcLXLF 0MA0xFaayNZknGINoVyxoC5LwUcW8wrNkaZEADVtW9N4DwHzGAtlq6pGUNJbMRKk pGX55k4jDNCcpC3fZwDmLDo68Yx6mKE1AGimgn1kp4+CDfy0CqzIzw+ASzv3yFLh LXgBZXURM57xjIGw86GqvKzrvFwogJx4PNLXG7mBbyloC5ftn0LOCtUnT6ufvYnc aqgbgVExdWjP8WKfHB3z1KCkQOrih4/QOZskQRfdqJLjmkjopv4mLjDxE7vhCO+a buMc0LrYxag=rjcs -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical notice regarding Red Hat OpenStack Platform 16.1 concerning etcd modifications that impact overall system reliability.. Red Hat, OpenStack, etcd, security update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 15, 2022 Important Red Hat
98

RedHat: RHSA-2022-0237 Important: OpenStack 16.2 Etcd Security Fix

An update for etcd is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform 16.2 (etcd) security update Advisory ID: RHSA-2022:0237-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:0237 Issue date: 2022-01-24 CVE Names: CVE-2021-29923 CVE-2021-34558 CVE-2021-44716 ==================================================================== 1. Summary: An update for etcd is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.2 - ppc64le, x86_64 3. Description: A highly-available key value store for shared configuration Security Fix(es): * net/http: limit growth of header canonicalization cache (CVE-2021-44716) * net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923) * crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1983596 - CVE-2021-34558golang: crypto/tls: certificate of wrong type is causing TLS client to panic 1992006 - CVE-2021-29923 golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet 2030801 - CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache 6. Package List: Red Hat OpenStack Platform 16.2: Source: etcd-3.3.23-7.el8ost.src.rpm ppc64le: etcd-3.3.23-7.el8ost.ppc64le.rpm etcd-debuginfo-3.3.23-7.el8ost.ppc64le.rpm etcd-debugsource-3.3.23-7.el8ost.ppc64le.rpm x86_64: etcd-3.3.23-7.el8ost.x86_64.rpm etcd-debuginfo-3.3.23-7.el8ost.x86_64.rpm etcd-debugsource-3.3.23-7.el8ost.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-29923 https://access.redhat.com/security/cve/CVE-2021-34558 https://access.redhat.com/security/cve/CVE-2021-44716 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYe7fX9zjgjWX9erEAQgTqBAApiEvRhNUFr0YXwwkpQDxTgVN4kt4be7m JBOgM17TmlQawxu3od5J7UFl+np1fV0L/QV//e+oDpDYwYynAIlDSL9iOucuuf6v s+csnjy/e7N/2z/4nfyZ+uVKSyWGqSCOJjtIVjiS1BGfyUSACCsfOiIAxBgQWtuB 7P0RxX2nZxKP3SCapYTpGgB2r661VN+Lp17Sf9gpkXC7ia+iAbItsYTZvc7Fs9YD bbTFq3tkec7yvDVN6grCe4RbtOcsh/TqqK0Mcwq5gbXJ1ufdYBP9Z6qexudaxRJe qPBKK9Btitivf0xzzDgWMzIMheypVJYRd8CiAOgdjlqEqhOBvSIuTHQOgkkllCQW /G0nRJVAS1dxmcu263nGmRGfHs7dqyvA7bTmrXHItNDPfiGbHg6cvzO8qeCVxBQ8 TCQPkFv8viZZNmjlJYQfrNKGnTFnCvxLCtVrB7pxffEOwRDAPcyub6ciuLrh9ThH 8X/19OPFQ2GXEFSortCFRs5JjcxAzfBUlPGa/jXjFBQYmx0xc90g/G4N5CGfAE1h BFTcrFy/0rbk8X6mWWMBaDT+vJSq0Tc9d0WNW00fQkSIxokv+rczFh9DF9Oppiwo z0Fq+DcCslQqtqR/um6M3WGOVlPL7LJfCrOuhfAokL7MFgepe3yEu/P6lhahzNZ0 MhfiHspUHDk=ZZOW -----END PGP SIGNATURE----- -- RHSA-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical has unveiled a crucial Kubernetes version 1.25 update, tackling various software vulnerabilities.. Red Hat OpenStack, etcd update, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 24, 2022 Important Red Hat
98

Red Hat OpenStack Platform 16.1 RHSA-2021-5072-01 Etcd Security Update

An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 16.1 (etcd) security update Advisory ID: RHSA-2021:5072-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2021:5072 Issue date: 2021-12-09 CVE Names: CVE-2021-31525 CVE-2021-33195 CVE-2021-33197 CVE-2021-33198 ==================================================================== 1. Summary: An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.1 - ppc64le, x86_64 3. Description: A highly-available key value store for shared configuration Security Fix(es): * net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1958341 - CVE-2021-31525 golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 1989564 - CVE-2021-33195 golang: net: lookup functionsmay return invalid host names 1989570 - CVE-2021-33197 golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 1989575 - CVE-2021-33198 golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 6. Package List: Red Hat OpenStack Platform 16.1: Source: etcd-3.3.23-3.1.el8ost.1.src.rpm ppc64le: etcd-3.3.23-3.1.el8ost.1.ppc64le.rpm etcd-debuginfo-3.3.23-3.1.el8ost.1.ppc64le.rpm etcd-debugsource-3.3.23-3.1.el8ost.1.ppc64le.rpm x86_64: etcd-3.3.23-3.1.el8ost.1.x86_64.rpm etcd-debuginfo-3.3.23-3.1.el8ost.1.x86_64.rpm etcd-debugsource-3.3.23-3.1.el8ost.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-31525 https://access.redhat.com/security/cve/CVE-2021-33195 https://access.redhat.com/security/cve/CVE-2021-33197 https://access.redhat.com/security/cve/CVE-2021-33198 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYbK/eNzjgjWX9erEAQgi1hAAkDi0+sr5a3h6z0Ui8MuUIu6lArCN5rQ0 m9QRRb7oxSLvgUHpJNdFgQEwXCnBcQ7YvQoopmhNQlzZK2/+D+WtlMv37WqOuJlv e8psYLrLfAakao+ICbwV3MY1hSq6AdAxh5mSw750eyH5XvN4j21x2RCWpjvT8QZL +5xzR24dJSIeNWs0haMtp2CNtcJ1gjnz4avPSQFUCn7E9bDKWMvyuIf0vsFVGC2p Q5pWRB1f7HW0zU/W3SlqlvvSiI9m4RTIMp63+wrm6ay36CVObHMkxTsiDSKw+BlU QfMizejdJFGmOvNh9jIiJlSEqFOkLhCPIfT8x8UVUm2mHbkRfUMDfjRKRQoFchdX EIW9QbU9FThYlsaUl8eTwGKtGrsPMUrsols61owvBfA+ALtYjarYsUoXejaXunWV z5VXXe7ceGlrYtvAtdaVRUVPM+W9md1/rpZRuF9zFtISCqz5AOBagA5VCpHz/KFv aBbV21/dMgY5HZy3GBLiYxDWVEbdbeviAfM0pelZ63MSGvrCFrH7S7CayZfv/60b kBddmbqJmCSPDoNOgLjlerBlA4hsXP/x8YvkDqrxcCU6P5JhtrF/LtOCtQiUU0+t skHxklomTknTNTM+FsKvqOWrmGykEpyvYWjUmxZit7GTnsdepVuRmWO8TWQH7q3E fzmSbYOgNtg=0OKe -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Moderate security alert for Red Hat OpenStack Platform 16.1 regarding etcd updates, highlighting critical impact information and resolution measures.. Red Hat Update, OpenStack Security, etcd Patch. . LinuxSecurity.com Team

Calendar 2 Dec 09, 2021 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here