Stay Secure with the Latest Linux Advisories

security advisoryred hatmoderate severity

Red Hat OpenStack 12.0 RHSA-2018-0616-01 Moderate Sensu Exposure

An update for sensu is now available for Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: sensu security update Advisory ID: RHSA-2018:0616-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2018:0616 Issue date: 2018-03-28 CVE Names: CVE-2018-1000060 ==================================================================== 1. Summary: An update for sensu is now available for Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7 - noarch 3. Description: Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security Fix(es): * sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections (CVE-2018-1000060) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Debashis Pradhan (Huawei Technologies) for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1541402 - CVE-2018-1000060 sensu: Password exposure in warn level logwhen configured for multiple rabbitMQ connections 6. Package List: Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7: Source: sensu-0.27.0-4.el7ost.src.rpm noarch: sensu-0.27.0-4.el7ost.noarch.rpm sensu-common-0.27.0-4.el7ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-1000060 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFau+cmXlSAg2UNWIIRAmnGAJ0XquiRhbsDRQ/AW67Ly1RmpskYogCcD76u Sr5CNy150qHW5bFNEsItnA8=XXGE -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat issued a notice regarding a Sensu security fix pertinent to the OpenStack Platform version 12.0. Explore strategies to reduce vulnerabilities.. Red Hat Security,Sensu Update,OpenStack Security,Password Exposure. . LinuxSecurity.com Team

Mar 28, 2018 Red Hat