Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
98
security advisorymoderateupdateRed Hat OpenShift 1.17.9 RHSA-2021-2532 Moderate: Jaeger Security Update
An update is now available for Red Hat OpenShift Jaeger 1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenShift Jaeger 1.17.9 security update Advisory ID: RHSA-2021:2532-01 Product: Red Hat OpenShift Jaeger Advisory URL: https://access.redhat.com/errata/RHSA-2021:2532 Issue date: 2021-06-23 CVE Names: CVE-2016-10228 CVE-2017-14502 CVE-2019-2708 CVE-2019-3842 CVE-2019-9169 CVE-2019-25013 CVE-2020-8231 CVE-2020-8284 CVE-2020-8285 CVE-2020-8286 CVE-2020-8927 CVE-2020-13434 CVE-2020-13776 CVE-2020-15358 CVE-2020-24977 CVE-2020-26116 CVE-2020-27618 CVE-2020-27619 CVE-2020-28196 CVE-2020-28362 CVE-2020-29361 CVE-2020-29362 CVE-2020-29363 CVE-2021-3114 CVE-2021-3177 CVE-2021-3326 CVE-2021-3449 CVE-2021-3450 CVE-2021-20305 CVE-2021-23336 CVE-2021-27219 ==================================================================== 1. Summary: An update is now available for Red Hat OpenShift Jaeger 1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Jaeger is Red Hat's distribution of the Jaeger project, tailored for installation into an on-premise OpenShift Container Platform installation. Security Fix(es): * golang: math/big: panic during recursive divisionof very large numbers(CVE-2020-28362) * golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: jaeger-updating.html 4. Bugs fixed (https://bugzilla.redhat.com/): 1897635 - CVE-2020-28362 golang: math/big: panic during recursive division of very large numbers1918750 - CVE-2021-3114 golang: crypto/elliptic: incorrect operations on the P-224 curve 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): TRACING-1725 - Elasticsearch operator reports x509 errors communicating with ElasticSearch in OpenShift Service Mesh project 6.References: https://access.redhat.com/security/cve/CVE-2016-10228 https://access.redhat.com/security/cve/CVE-2017-14502 https://access.redhat.com/security/cve/CVE-2019-2708 https://access.redhat.com/security/cve/CVE-2019-3842 https://access.redhat.com/security/cve/CVE-2019-9169 https://access.redhat.com/security/cve/CVE-2019-25013 https://access.redhat.com/security/cve/CVE-2020-8231 https://access.redhat.com/security/cve/CVE-2020-8284 https://access.redhat.com/security/cve/CVE-2020-8285 https://access.redhat.com/security/cve/CVE-2020-8286 https://access.redhat.com/security/cve/CVE-2020-8927 https://access.redhat.com/security/cve/CVE-2020-13434 https://access.redhat.com/security/cve/CVE-2020-13776 https://access.redhat.com/security/cve/CVE-2020-15358 https://access.redhat.com/security/cve/CVE-2020-24977 https://access.redhat.com/security/cve/CVE-2020-26116 https://access.redhat.com/security/cve/CVE-2020-27618 https://access.redhat.com/security/cve/CVE-2020-27619 https://access.redhat.com/security/cve/CVE-2020-28196 https://access.redhat.com/security/cve/CVE-2020-28362 https://access.redhat.com/security/cve/CVE-2020-29361 https://access.redhat.com/security/cve/CVE-2020-29362 https://access.redhat.com/security/cve/CVE-2020-29363 https://access.redhat.com/security/cve/CVE-2021-3114 https://access.redhat.com/security/cve/CVE-2021-3177 https://access.redhat.com/security/cve/CVE-2021-3326 https://access.redhat.com/security/cve/CVE-2021-3449 https://access.redhat.com/security/cve/CVE-2021-3450 https://access.redhat.com/security/cve/CVE-2021-20305 https://access.redhat.com/security/cve/CVE-2021-23336 https://access.redhat.com/security/cve/CVE-2021-27219 https://access.redhat.com/security/updates/classification#moderate 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYNNV49zjgjWX9erEAQh2yg//UIjE23dp3HouKxftUe46SiQPLw+NyCuD bUK0//83OTZRzd/EOSNKjVurywNa+UNLLYFZ8qi5uQ5Io/UGzSIrB90mVr4QJ2dn n160UWvhrxvh35TnrObB7GKGYLJ7yJkXdvPdARm4iI4V7Uv18Q/c7pObOgR1bXza YXLRaUhkMS+zF8mSJcmYsPh1XnynA8ipLPlaNT/HkGkly5k8qHF3mHJTxAyFRp50 sNOFx1YdPmYET2QLH2RMAykVCBZQsvIdLZppq//aPSpQDHNdElBZTfkFLSkswVx/ h9dhfrfTy7+0bMxvcdV/Osqr5mXACV5jSkn9Eb4ScRCbF119hLGN0qSa4elzvoMP 7e09q7Tb4uVM+y8zyHBw25ZvUEqvoYMlpMuz4ob7z/QMb+8991vLO7obCe+qJ+lt KqN5ZAwljBv3i+Z6zYy/+j+nq5DksjBBMsXCa/qDd0pkNQORvsevHmzm7XNmt9lF qMxBAKiJWqq3KPFupxrGJJjhBeKyapVXixJU5yqXa8l1Bs36AYvpKCqDJbWfcGbE ScwfSrZ9OIhdLDcebOaR+tfvH0JMf5mLhf2k7GKYl85CW+5XJcnFb3zOjcwb+Fby lfjo8ZWchSXZeMT+9ndvk3AEJi4R289xi5v2UAUViHqCr08YUEVemqjwC4EIlXO2 O2Aow5goVqM=9fCa -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 23, 2021
Red Hat
98
security advisorymoderate severitysystem updateRedHat: RHSA-2020-2636-01 Moderate: Jaeger 1.17.3 Credentials Leak
An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenShift Jaeger 1.17.3 container images security update Advisory ID: RHSA-2020:2636-01 Product: Red Hat OpenShift Jaeger Advisory URL: Issue date: 2020-06-19 CVE Names: CVE-2020-10750 ==================================================================== 1. Summary: An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Jaeger is Red Hat's distribution of the Jaeger project, tailored for installation into an on-premise OpenShift Container Platform installation. Security Fix(es): * jaegertracing/jaeger: credentials leaked to container logs (CVE-2020-10750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: jaeger-updating.html 4. Bugs fixed (https://bugzilla.redhat.com/): 1838401 - CVE-2020-10750 jaegertracing/jaeger: credentials leaked to container logs 5. References: https://access.redhat.com/security/cve/CVE-2020-10750 https://access.redhat.com/security/updates/classification/#moderate 6.Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXuzmOtzjgjWX9erEAQidWw//W+xgbnTXobGyF72N3yhNA4avS9Kown6S q6MaAswAP2RY8bKuIvN04YYZ/s3jgz1iaoGFtsxZyuJfp8rMyuXKd5A7H6PWEPLY Q2kn3AAUs1N421GbV+TCo0d06eLR9Ie+du0/vubNftlEkCM1zCSkM+718YUg+TYU 6XAGNbe4AqEfWWyT/qPlb1yJdIA3+dyjHVat8KFRhXpS63XA9jF50W+tW6d4l5pc uDwMgaQ0sfkRn1Ooa7gMufxk10hQ9yrmlZ7Uzpsf2LKQlBnoqJ23w/KZnB7oxnIN VIaGrRV2fKfcEIZZDVCfyRPCoV3US3+6WecnjWO9OSQzyzxp9ZM2x3zsu3u1J46v EIAfpzIUzfmWBlQLowomWEKr17InYu4IdNXysMtbNU2p5jmfP70DFh49CFaF85Rt S2u22zhtQMhWThJwpvC5KuBZTH014uEfV29mcfLARhXurI23JZ/XijB8N3DFSxDb bFKCSMiOQ/1iaVb3hVlr1VQGkjbueyxTAil1h6Vqm6RZ+/nSqGx/TIgfFd00Obkp RRdJthGQO/OsQPbj2lp/mrQFrKCpqFYpZbL+8IhovhWbUIx9nlANvH/Z1bqm1lLP hniwdObIx2lrwGRi1jYbFlX6ZQIvaP0IqO6QPfOJL4nId1kHxD6Jhwyl+cxtK3ne 3rsUdqEL5ck=xrV4 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 19, 2020
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!