Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisorymoderatesecurity issueRed Hat OpenShift 5.3.5 Moderate: RHSA-2022:0721-01 Security Fix
OpenShift Logging bug fix and security update (5.3.5) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: OpenShift Logging bug fix and security update (5.3.5) Advisory ID: RHSA-2022:0721-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2022:0721 Issue date: 2022-03-01 CVE Names: CVE-2020-28491 CVE-2021-3521 CVE-2021-3872 CVE-2021-3984 CVE-2021-4019 CVE-2021-4122 CVE-2021-4192 CVE-2021-4193 CVE-2022-0552 ==================================================================== 1. Summary: OpenShift Logging bug fix and security update (5.3.5) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: OpenShift Logging bug fix and security update (5.3.5) Security Fix(es): * jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception (CVE-2020-28491) * origin-aggregated-logging/elasticsearch: Incomplete fix for netty-codec-http CVE-2021-21409 (CVE-2022-0552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errataupdate: https://docs.redhat.com/en/documentation/openshift_container_platform/4.9/html/release_notes/ocp-4-9-release-notes For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.7/html/logging/cluster-logging-upgrading 4. Bugs fixed (https://bugzilla.redhat.com/): 1930423 - CVE-2020-28491 jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception 2052539 - CVE-2022-0552 origin-aggregated-logging/elasticsearch: Incomplete fix for netty-codec-http CVE-2021-21409 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): LOG-2182 - Logging link is not removed when CLO is uninstalled or its instance is removed 6. References: https://access.redhat.com/security/cve/CVE-2020-28491 https://access.redhat.com/security/cve/CVE-2021-3521 https://access.redhat.com/security/cve/CVE-2021-3872 https://access.redhat.com/security/cve/CVE-2021-3984 https://access.redhat.com/security/cve/CVE-2021-4019 https://access.redhat.com/security/cve/CVE-2021-4122 https://access.redhat.com/security/cve/CVE-2021-4192 https://access.redhat.com/security/cve/CVE-2021-4193 https://access.redhat.com/security/cve/CVE-2022-0552 https://access.redhat.com/security/updates/classification#moderate 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYh5GQtzjgjWX9erEAQgxvRAAjieBKg+Va5m4NzwOAnVnP9CGLGwBZRiu f5JIjF/+WdUHUMI3I8NtMo9/Hl+n5MOgZqSUR0aTXxvRvJUlZZzQYkQ1k10lBBx2 EeMtf98m2lC4PeeDsRhzz2aFqo1b9TPouzKsqIInhqcHzN8NaRLqoxW35muogvA9 A0OKATnLX91bnmb8XOIKodLocG0xE/AYWn7knZRho0TamSeBMQSUYvv93K68woAB im+9ySzsoXVMPazuzL6YBvalRWPMCsTSxfTOKr7i7rpF3hEtewLfq4NRG6w/yMCN Q5TOgZpNShpcqAnZmkEs+vz+r3gTHt/QBbWjHf/8s+UJtTuFUG52daKxS76wLfZZ /e7Wklv5H+UY+g2kyyTZW4H3O/szj73cLs7NaXSzRdmYg1pdKVu/ATqbjUR03EME QHr9v0cD4Lz9DIIpDeZg5xueqlQ8CVf4tHsjtlYPiamC1x0GkFrR9SbBq/Qg03z0 2jC+K8RGr8K/g8MdsUcA0BhGnwLCQCItsMhXWXoDv1L8OmK6+9g5kN98kw3vUKQh ZSGnw7VIEb+2AVjg2/k3xrMofJ7DVGDj3OAkfAjaJu8/oS9455RKhjCrnreTP2au MtHnbl2xKhyWv6j3+o18UVmAdMgSitRfF3HeHKP3QHX1Bm1VFoaR4iOG7gkfmFCS RZPjSKclh9o=Z0o1 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Mar 01, 2022
Red Hat
98
security advisorybug fixlow severityRed Hat OpenShift Logging Update: RHSA-2022-0047 Low Severity
An update is now available for OpenShift Logging (5.0.11) Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: Red Hat OpenShift Enterprise Logging security and bug fix update (5.0.11) Advisory ID: RHSA-2022:0047-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2022:0047 Issue date: 2022-01-10 CVE Names: CVE-2021-3712 CVE-2021-20321 CVE-2021-42574 CVE-2021-45105 ==================================================================== 1. Summary: An update is now available for OpenShift Logging (5.0.11) Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Openshift Logging Bug Fix Release (5.0.11) Security Fix(es): * log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.7/html/release_notes/ocp-4-7-release-notes For Red Hat OpenShift Logging 5.0, see the followinginstructions to apply this update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.7/html/logging/cluster-logging-upgrading 4. Bugs fixed (https://bugzilla.redhat.com/): 2034067 - CVE-2021-45105 log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): LOG-2075 - The elasticsearch-im-xxx job failed when trying to start index management process for a non-existent(empty-named) index 6. References: https://access.redhat.com/security/cve/CVE-2021-3712 https://access.redhat.com/security/cve/CVE-2021-20321 https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/cve/CVE-2021-45105 https://access.redhat.com/security/updates/classification#low 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYdw5DdzjgjWX9erEAQjLZg/+OPU4YzK7e7Qyqg/EAVBxveNvz4fYFIA1 TKZXJio5bzEfT0b+PaLNCbRTM9o9TGDb99HYhQ1FDHJNegcZdev1wdvcTSxb+pAQ 7rw+fGp5NIZ4/6RC/o4YXp4LoW5pJ1hYN+MzPzw2uLFQW55vzF4229LY1U/mfEAv DCnWk2pVD2Li6+mXteEeTobd+bsX4yXlSGrDY5f4j80LaCXo3gNVDClEMekQiWFE B5fuDpcgLPGygM50w2b73JBOvs6VctSBgMj8kHzFL1ndXpgbSAOGYqQ8AT03akbR e7f9aNCieTKLxsfniGQQaF9m6b9Jes2LsntUMjhKT50P/Cfsap61BKwC5cJKYPBH br9c8EDDLq7mAKwJTNxFChwuIdjb5DLIhoit/cBUz6gM7uRqyFbjOMgl0tf60oXJ kcoxjWq1OhHEsd0fi0yWVBjOruXTf9Vg2fCXHXF4Rq0Q4Kl66MEh+bUDV1tJNrjJ EBYxeimBumVc9DfUCeJc0Pxlxxbe2chZygYMIWI4Wy7AiS8Aeuy7OqFGm33onFd0 4QD2y6UGl23eVXtIY826AHDJ286eOBBq0diZ5MSS+DWFsM2e0skhSP81+Os82eez 6JvIv5B0mLbUlMLsgHUEzpgjan0I9QvyM/8BQErP67YUFulodCsX1Cy+k65k6pyQ 6N4ca07ukIg=vUCo -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 10, 2022
•Low
Red Hat
98
security advisoryRed HatDoS issueRed Hat OpenShift 5.1.6 RHSA-2022:0042-01 Low Severity DoS Fix
An update is now available for OpenShift Logging (5.1.6) Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: Red Hat OpenShift Enterprise Logging security and bug fix update (5.1.6) Advisory ID: RHSA-2022:0042-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2022:0042 Issue date: 2022-01-10 CVE Names: CVE-2021-3712 CVE-2021-20321 CVE-2021-42574 CVE-2021-45105 ==================================================================== 1. Summary: An update is now available for OpenShift Logging (5.1.6) Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Openshift Logging Bug Fix Release (5.1.6) Security Fix(es): * log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.8/html/release_notes/ocp-4-8-release-notes For Red Hat OpenShift Logging 5.1, see the followinginstructions to apply this update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.8/html/logging/cluster-logging-upgrading 4. Bugs fixed (https://bugzilla.redhat.com/): 2034067 - CVE-2021-45105 log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): LOG-1868 - The elasticsearch-im-xxx job failed when trying to start index management process for a non-existent(empty-named) index [openshift-logging-5.1] LOG-2022 - resourceVersion is overflowing type Integer causing ES rejection 6. References: https://access.redhat.com/security/cve/CVE-2021-3712 https://access.redhat.com/security/cve/CVE-2021-20321 https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/cve/CVE-2021-45105 https://access.redhat.com/security/updates/classification#low 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYdvkrNzjgjWX9erEAQiCIxAAhmhwXW1JbFXJCpQhFi1bLvpTvjvRCtFs yABToAupWuX55VDFnSssUgvVD+o/tsev56LxlCaf46OcBSw0FzwjSnEUhijfnowL IVMbRakb2T9ojpJ72DyeRW9XUQXiHrksY+UdkskvM3ZVK4DiYUOk8CymMnalLX69 J/YD5G92NpimZxsKRXzhpYlstXuAFzOlC06lCuM2DcClEsQ3cFu6ZnQY5kKjg6Yw SbGmxlOBCRBaFbyo8zndzFZrGxxX9ufGuhyduxUffrJPZzUG6HK6Dx3D9ozb+Nz3 GH/OLgQCeQew8ZApibBeYDFiz4iSbzA34hcCQXTmkop840wudMHVz7Pq7ixUAsmX Trcx1T9Ejc8NT2CfvvYOffx/6sznWZQlQx4hvyXhOAHT81DfN2tpugOWuFr7AJm7 nzU3wIxQW07VnERKveSP0yfKI9P6Rw5qxaL6gJ8hQeRAHbaLrHKFYMHXZ86RTfxm GkZYQVR6dKUcL82Uyw2yji9+WdrsXaJnABUi8DtmZbtNAhQWiUKbf2f/hhP9z0N1 wfchF0dCCAbI4udwi854/0TBVtt7VE06ZVAvHREIv/g55F7+1rhVN6XXJQo4qcJv QX3yGzLmdQoRGasLGT9o9AnYSEZFwTJ7rV50EtXTQZHSKOA0lwX2uV/9U2yUDRKN avqOop0vqXc=gAUz -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 10, 2022
•Low
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!