Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 12 articles for you...
98
security advisorymoderatesecurity updateRed Hat OpenShift: RHSA-2023-5096-01 Moderate: Logging Subsystem Update
Logging Subsystem 5.5.16 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: Logging Subsystem 5.5.16 - Red Hat OpenShift security update Advisory ID: RHSA-2023:5096-01 Product: Logging Subsystem for Red Hat OpenShift Advisory URL: https://access.redhat.com/errata/RHSA-2023:5096 Issue date: 2023-09-20 CVE Names: CVE-2023-3899 CVE-2023-4456 CVE-2023-34969 ===================================================================== 1. Summary: Logging Subsystem 5.5.16 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Logging Subsystem 5.5.16 - Red Hat OpenShift Security Fix(es): * openshift-logging: LokiStack authorisation is cached too broadly (CVE-2023-4456) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2233087 - CVE-2023-4456 openshift-logging: LokiStack authorisation is cached too broadly 5.References: https://access.redhat.com/security/cve/CVE-2023-3899 https://access.redhat.com/security/cve/CVE-2023-4456 https://access.redhat.com/security/cve/CVE-2023-34969 https://access.redhat.com/security/updates/classification#moderate 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlCw9FAAoJENzjgjWX9erE8uEP/R8Vaa/5DZvXpKtewh4v2Xlr jQuBTL/BwOKn0gronaZv2j6d3MHXRHJjMq4o1+ca/7JchHSJJ1ZvjKCsE67k4Ork sW2pgh/BkyyByMb8nsQMfw1RuwxYNArtmnv/laqvteVseFU1r+rovR8U5aWfX7Qg 7SyhANlZZ9irKQqpwhRXbVw1hZux2GK+LK2qHh+UZ/PaPomxm5mItn1uNqDJu2nF 2cVonKIzG+X3JReyaAYI4lM/ZPEv+Spim/vzJ4ehdf1zar/8SiDGdSCcoDkcHhru VLjEfOaFKJqSvZPW87oZlEtlXbKA0Us+RAghOBROxya7xgW/hmZACulPPqJ436Qy CwJC/E02LcbsGfFnN3vmMI1rBqTEFt2RWd/LyBwZd4oeI41XFMu8fC0FeEPZgjHY uEOYfRh880fxqnWjxKdQGhcbDYyb2vdumxuyTONus9CSRTR1eVbyvOewMLpFP6lI bH1L3+PbWPV4+VmK5y9k5Ix+ExMISjCJVhwmsPsuLMgVoHVzYS8OSi4wLaUEb838 x8hbktyhbEAWru7aSs2w/YehII2H8BqsGHO8YKuUQdC341z/si0lU/uAhCAE1DGb nusR7+SeM9BoDW/E+eUV6ef1OpiUT0ryFArpUMamJYalA6RdBirWBGQ45aDZV3e0 i1OyszjlYnHBAeYipZOC =AFo3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 20, 2023
Red Hat
98
security advisorydenial of servicesecurity updateRed Hat OpenShift GitOps 1.9: RHSA-2023-5029-01 Critical Denial of Service
An update is now available for Red Hat OpenShift GitOps 1.9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Critical: Red Hat OpenShift GitOps security update Advisory ID: RHSA-2023:5029-01 Product: Red Hat OpenShift GitOps Advisory URL: https://access.redhat.com/errata/RHSA-2023:5029 Issue date: 2023-09-08 CVE Names: CVE-2023-2602 CVE-2023-2603 CVE-2023-2828 CVE-2023-3899 CVE-2023-27536 CVE-2023-28321 CVE-2023-28484 CVE-2023-29469 CVE-2023-32681 CVE-2023-34969 CVE-2023-38408 CVE-2023-40029 CVE-2023-40584 ===================================================================== 1. Summary: An update is now available for Red Hat OpenShift GitOps 1.9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Security Fix(es): * ArgoCD: secrets can be leaked through kubectl.kubernetes.io/last-applied-configuration (CVE-2023-40029) * ArgoCD: Denial of Service to Argo CD repo-server (CVE-2023-40584) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2233203 - CVE-2023-40029ArgoCD: secrets can be leak through kubectl.kubernetes.io/last-applied-configuration 2236530 - CVE-2023-40584 ArgoCD: Denial of Service to Argo CD repo-server 5. References: https://access.redhat.com/security/cve/CVE-2023-2602 https://access.redhat.com/security/cve/CVE-2023-2603 https://access.redhat.com/security/cve/CVE-2023-2828 https://access.redhat.com/security/cve/CVE-2023-3899 https://access.redhat.com/security/cve/CVE-2023-27536 https://access.redhat.com/security/cve/CVE-2023-28321 https://access.redhat.com/security/cve/CVE-2023-28484 https://access.redhat.com/security/cve/CVE-2023-29469 https://access.redhat.com/security/cve/CVE-2023-32681 https://access.redhat.com/security/cve/CVE-2023-34969 https://access.redhat.com/security/cve/CVE-2023-38408 https://access.redhat.com/security/cve/CVE-2023-40029 https://access.redhat.com/security/cve/CVE-2023-40584 https://access.redhat.com/security/updates/classification/#critical 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJk+xy2AAoJENzjgjWX9erE2VAP/ivfRxBKoDIM7wFfWnn7McCk A5PTqdLlwQ0GGn7OdUF0X4rAnW7dfq1BzWyPscDfRP/zzHcwnyubiDDx2oXSpr+k GWjsaKwLQh1eD5nB6ryq1E9US8RhQPATrB3HYx9NXepngNHAiOk99K6NY5LN2B4e uC+WBUUDWEWs0W6D49/ykdlsYIO30AkZl1fwxFM9ijyNxeQBl6XFO1z9HzDw5A8d f8XNjHiyqCcQBgo0c2S+cENuRXRqQh2cRevG4Yh4qpURIv/ULdwpSZPFnsFgVhFw 2HEXA1S+kNVxUHClTqBVznDdAsBeG3UvL88OL1NSB1JyiGaTm8H/4BLRPUyLL/nB btsRPbZ2B9bDsPfyTSvWo1zdzDKXrXxpFjkQox8chjek6t5+ju9+lGylplwxTyd/ oqknBF/aHFf2AlfaRrbfUwBlk7su6L2yYm9WyzaVJsP7mB8LRuHMI4GWNiSK2l/1 mvWHuv8VeFYT33iNkgDz3wOHv0jf+DpLOciz0j76wWkCdgxG/dbQkPpydAlTAPYk ivo23HQxC0pa7z+DfWSqXcKaTeUddV137PIB4dZjbCh6u0T4LurIP+ZhQ3IQ+0sz 1VQ8zMVYkJe5Yq/dUmwY3ExYTI7jGPbuQPiJL/VP1tIDkyi6g3z7NzzM9p30yM7j 4PCLjjV8uv24ql4JUrI/ =0M3w -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 08, 2023
•Critical
Red Hat
98
security advisorydenial of servicesecurity updateRedHat: RHSA-2023-4341 Moderate: Logging Subsystem Denial of Service
Logging Subsystem 5.7.4 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: Logging Subsystem 5.7.4 - Red Hat OpenShift bug fix and security update Advisory ID: RHSA-2023:4341-01 Product: Logging Subsystem for Red Hat OpenShift Advisory URL: https://access.redhat.com/errata/RHSA-2023:4341 Issue date: 2023-08-02 CVE Names: CVE-2022-25883 CVE-2023-22796 ===================================================================== 1. Summary: Logging Subsystem 5.7.4 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Logging Subsystem 5.7.4 - Red Hat OpenShift Security Fix(es): * nodejs-semver: Regular expression denial of service (CVE-2022-25883) * rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2164736 - CVE-2023-22796 rubygem-activesupport: Regular Expression Denial of Service 2216475 - CVE-2022-25883 nodejs-semver: Regular expression denial of service 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): LOG-2701 -[Vector] [Cloudwatch] namespaceUUID is not added to logGroupName when forwarding logs to Cloudwatch. LOG-3880 - Deprecated `curation` and `forwarder` are displayed in the console when creating clusterlogging via `Form view`. LOG-4015 - [Vector][Loki] vector_component_sent_bytes_total metric for Loki sink not exposed by vector. LOG-4073 - Invalid link to doc from installed operator in OpenShift Web Console LOG-4237 - Regression with Red Hat OpenShift Logging 5.7.2 LOG-4242 - Vector pods raise `Configuration error` when forwarding to cloudwatch/googlecloudlogging with tlsSecurityProfile configured. LOG-4275 - [release-5.7] Vector pods going into a panic state LOG-4302 - CLO raises error message "URL not secure: , but output gcp-logging has TLS configuration parameters" if add tls.securityProfile to CLF when forwarding to googlecloudlogging/cloudwatch. LOG-4361 - [release-5.7] Setting custom options on the application tenant removes user-alertmanager configuration LOG-4368 - [release-5.7] sts cloudwatch issues after upgrading from 5.5 LOG-4389 - [release-5.7] Query Label Values from Loki return duplicate values. 6. References: https://access.redhat.com/security/cve/CVE-2022-25883 https://access.redhat.com/security/cve/CVE-2023-22796 https://access.redhat.com/security/updates/classification/#moderate 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJkymZDAAoJENzjgjWX9erEOvsP/1qyYiieOWJY/r4PPOJ6nYDH t+CegcwyG9rGlMn0+UibYtmmuiH4iYRV+iWDcU9h1yeGWt1Xp1BYS1lOTZ2+1rao FmiTGZoOLJXeBhy2ZTMm6JG6HCCazUVlLLlQyXU2SZ24l/2fi9OZ4zl/1Dn6tibZ YW7EHpuJRv5WqJHOrYZi4AoMj1DZYHsAuZDF/eqT92liwypJD2dsYt8FM19BeiTG 9hSEV0YSU+BG+41sLs5dP/sUp1SE1vm31/zRCZPxSRaQPnABapTMpvnrPHIUgSa0 iPTzYcTLiBsLL7wEz7zrvtKvLcZyyY/O59Id/n1qLP4RXUFgmYKe2x63fOxLVbX5 n4aY9tfmEuyWqji90NTHvtKI+HAHmJoKZRLm6alBDXQuotId/IWrY8/XipIQWEtC CZC4eZ/DjtBeacO1coRhUc6uNigxik/nEmZ+F4v3MyooTm82RBbVOcEyQH2H/cZ4 902EYa2kmLJSj4EndkV0KWlWUHf12nEF3rvpX8CtVlaGvs8a+76eGEQjEH7oZS1D rWw6IWxkd9wqnzIqv++qOwW2VTKkgpUDR1AwoJ+kxqewoYZj3W821m2HAskuVqGj xjSFyFNZOtQhvMEy6rgZA3seSaoK+RiP7KcrOAfq+Ay8LYZYLkkjwt8DI5B5Au8G FFwpxI/YB+KCwc2hUxVH =hBt4 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Aug 02, 2023
Red Hat
98
security advisorymoderatesecurity updateRed Hat OpenShift 2.2.7 Moderate Advisory: RHSA-2023-3645-01
Red Hat OpenShift Service Mesh 2.2.7 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenShift Service Mesh 2.2.7 security update Advisory ID: RHSA-2023:3645-01 Product: RHOSSM Advisory URL: https://access.redhat.com/errata/RHSA-2023:3645 Issue date: 2023-06-15 CVE Names: CVE-2021-20329 CVE-2021-43138 CVE-2022-2880 CVE-2022-4304 CVE-2022-4450 CVE-2022-24999 CVE-2022-25858 CVE-2022-27664 CVE-2022-36227 CVE-2022-39229 CVE-2022-41715 CVE-2023-0215 CVE-2023-0286 CVE-2023-0361 CVE-2023-27535 ==================================================================== 1. Summary: Red Hat OpenShift Service Mesh 2.2.7 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation. This advisory covers the RPM packages for the release. Security Fix(es): * mongo-go-driver: specific cstrings input may not be properly validated (CVE-2021-20329) * async: Prototype Pollution in async (CVE-2021-43138) * express: "qs" prototype poisoning causes the hang of the node process (CVE-2022-24999) * terser: insecure use of regular expressions leads to ReDoS (CVE-2022-25858) For more details about the security issue(s), including the impact, a CVSS score,acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 1971033 - CVE-2021-20329 mongo-go-driver: specific cstrings input may not be properly validated 2126276 - CVE-2021-43138 async: Prototype Pollution in async 2126277 - CVE-2022-25858 terser: insecure use of regular expressions leads to ReDoS 2150323 - CVE-2022-24999 express: "qs" prototype poisoning causes the hang of the node process 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): OSSM-3596 - Port istio-cni fix for RHEL9 to maistra-2.2 OSSM-3720 - Port egress-gateway wrong network gateway endpoints fix in maistra-2.2 OSSM-3783 - operator can deadlock when istiod deployment fails [maistra-2.2] 6. References: https://access.redhat.com/security/cve/CVE-2021-20329 https://access.redhat.com/security/cve/CVE-2021-43138 https://access.redhat.com/security/cve/CVE-2022-2880 https://access.redhat.com/security/cve/CVE-2022-4304 https://access.redhat.com/security/cve/CVE-2022-4450 https://access.redhat.com/security/cve/CVE-2022-24999 https://access.redhat.com/security/cve/CVE-2022-25858 https://access.redhat.com/security/cve/CVE-2022-27664 https://access.redhat.com/security/cve/CVE-2022-36227 https://access.redhat.com/security/cve/CVE-2022-39229 https://access.redhat.com/security/cve/CVE-2022-41715 https://access.redhat.com/security/cve/CVE-2023-0215 https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/cve/CVE-2023-0361 https://access.redhat.com/security/cve/CVE-2023-27535 https://access.redhat.com/security/updates/classification#moderate 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZIuxJdzjgjWX9erEAQglEg/6A7Ceu4fLKvXl+RRcBZs1TAFYReXxYOcd KGEDPmEuS2YCS3pn4CN/CqPYcgp1YmtTrpUZxmzKoAZjInJ3kc4zG7XGim3eLBiC LUWMl7DUM9voriHCmrktjr3sMfryng7FL5i9NT8Sh0YxyeJ0DEr/3Pziyae5JezY BC1uColX7LtZUa0dLgP3Tl7lW/tEn2TwOUldmLAJwjzvECzsCelLT57DOUbeibV0 TrmGs6ZOhUDNzbLHRZuvtLXIJlL0LquR/B/KzOT7ZuawEAxMmh70t2AdS3mD4YXq GxG9b4mfq7zIYa6nvUnTcaKxM/gE0TE0Vrrk9FdUfXcpyQfZnVakLf3i5ll0XmqA 7YSSdBJIj8kccbz7DV9siJVyCMmlN/7KB0QYont4MiIvY4/ovS9pytDtuJ2xvOZ4 pTe6tF2i8S+XvI5D173I7+QoN8fUGiP3gdArRKFu7GlFXZfrgq4Yfl4wQR26tbpE CCrT1ct9Bj1IdvFSOexBzaNArh60Vpi0uUYfYg2smVPJslCNhKY9c1D0T/pLZL3b mO5ytnq/zaNPFSYS4LpuBn9qX1TXJmlNQlpm/Pnzs//YVaZbxXwvzzGC4vVr7F+r +VVlfI43X4bLKseuxToheH9UrMIJRW+aE6bFHE1ss22m9y5n/kHRK8oDb5FRur3b LOOJa1Oil6M=4VhL -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 16, 2023
Red Hat
98
security advisoryimportantsoftware enhancementRed Hat OpenShift 4.10: RHSA-2023:1154 Important Memory Growth Issues
Red Hat OpenShift Container Platform release 4.10.54 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: OpenShift Container Platform 4.10.54 security update Advisory ID: RHSA-2023:1154-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2023:1154 Issue date: 2023-03-16 CVE Names: CVE-2021-4238 CVE-2022-41717 ==================================================================== 1. Summary: Red Hat OpenShift Container Platform release 4.10.54 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.10.54. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHBA-2023:1153 Security Fix(es): * goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be (CVE-2021-4238) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other relatedinformation, refer to the CVE page(s) listed in the References section. 3. Solution: For OpenShift Container Platform 4.10, see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.10/html/release_notes/ocp-4-10-release-notes You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:b13ee67469f7f85a1b1daf57424f3c7c02c3a188cb640dc6284742091a7e6d50 (For s390x architecture) The image digest is sha256:4c776be05c475ee885829444509258b486d79d8128e12d6d2263ab7cdef83ce8 (For ppc64le architecture) The image digest is sha256:2d4e0af6ca2afc8c10d210aa520aba602618f3fad4cb42636bddb57b1f0ce425 (For aarch64 architecture) The image digest is sha256:7cadaaf6e0f71645864963e6c47c75852ce68aff80c963dfba2ddf51c0b836c4 All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.10/html/updating_clusters/updating-cluster-cli 4. Bugs fixed (https://bugzilla.redhat.com/): 2156729 - CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be 2161274 - CVE-2022-41717 golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests 5. JIRA issues fixed (https://issues.redhat.com/): OCPBUGS-3997 - [4.10] provisioning interface on master node not getting ipv4dhcp ip address from bootstrap dhcp server on OCP IPI BareMetal install OCPBUGS-4341 - oc get dc fails when AllRequestBodies audit-profile is set in apiserver OCPBUGS-5977 - Implement LIST call chunking in openshift-sdn OCPBUGS-7657 - Editing Pipeline in the ocp console to get information error OCPBUGS-7741 - [release-4.11] fail early on missing node status envs OCPBUGS-7795 - thanos-ruler-user-workload-1 pod is getting repeatedly re-created after upgrade do 4.10.41 OCPBUGS-7815 - [release-4.10] [AWS EFS] NFS mount disconnects and becomes unavailable. OCPBUGS-7827 - set default timeouts in etcdcli OCPBUGS-7831 - PTP BC: Unexpected openshift_ptp_clock_state metric added in FREERUN state after bringing down and up a ptp slave interface OCPBUGS-7997 - PTP 4.12 Regression - CLOCK REALTIME status is locked when physical interface is down OCPBUGS-8020 - Azure Disk volume is taking time to attach/detach 6. References: https://access.redhat.com/security/cve/CVE-2021-4238 https://access.redhat.com/security/cve/CVE-2022-41717 https://access.redhat.com/security/updates/classification/#important 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZBLe5tzjgjWX9erEAQhA4g//TGys159MdqutZY0CjUWfpF3H7rc1yLML skq9MCCDPxTRSiEelRPESiZJMS0q6kTVa9imRyh801eIVeh+pDSjdtEIpt4fgDA9 C/Bz5cXuhOcM8O64KdhDGCxz6a+eTfiKhb4QfmsdsQNp+kgGRt2L5ZDtuxru3I09 Jk3qFWCTnFPg6oyyNjvEeFo7AsOS2+pCmTg9t5RlDux0LOZOaZMprZK1YnnnjbWq /wp8aV/OHyLa2C9Y3hxc0nIWxuIpluZbNADeAj4RFGh9sXzPp132ZVcCVNB2dxNv zOD2pk7cIR0dpKQXd/hAgq01r4EPGBb8GbOD7ot3EUsyOtUPxVUoJCM3sfd0utR8 xbPvoApPOnKgyIHmGPNQRTiPgPGHBLpn2u4h14veKKu0IaP+IbZkUZgx8k8Y+/Kw RiSaWpUSR/Lmx78IGsgGwVB2GPhETbM5Iy6dCI2o3IhcsEWHYcZM9Wxz/sXrvf3H kf+DySNGqLnU60Bp3hJOJ5xov2caIRgr2VaHkUzXNVLIHh/2l6HOWNg3fVtAgg3a 97eUdGQs+fdy6o+b9acg0hc+7g69PujvKCat1uuarBFYw4A+I+aoqDMwnwmodBmG Cpe2b2rtPuY4JgLa9C8GUwTTlLAKtkUxcK8wxYnSPkNHuoS5eKy+1L2SI59j3wVV kxrlc7O6pCg=olEr -----ENDPGP SIGNATURE----- -- RHSA-announce mailing list
Mar 16, 2023
•Important
Red Hat
98
security advisorymoderatesecurity issueRed Hat OpenShift 2.7.2 Moderate: RHSA-2023:0272-01 Local Escalation
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat support for Spring Boot 2.7.2.SP1 security update Advisory ID: RHSA-2023:0272-01 Product: Red Hat OpenShift Application Runtimes Advisory URL: https://access.redhat.com/errata/RHSA-2023:0272 Issue date: 2023-02-06 CVE Names: CVE-2022-23181 ==================================================================== 1. Summary: An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat support for Spring Boot provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform. This release of Red Hat support for Spring Boot 2.7.2.SP1 serves as a replacement for Red Hat support for Spring Boot 2.7.2, and includes security, bug fixes, and enhancements. For more information, see the release notes linked to in the References section. Security Fix(es): * tomcat: local privilege escalation vulnerability (CVE-2022-23181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: Before applying the update, back up your existing installation,including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update. 4. Bugs fixed (https://bugzilla.redhat.com/): 2047417 - CVE-2022-23181 tomcat: local privilege escalation vulnerability 5. References: https://access.redhat.com/security/cve/CVE-2022-23181 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=catRhoar.spring.boot&version=2.7.2.SP1 https://access.redhat.com/documentation/en-us/red_hat_support_for_spring_boot/2.7/html/release_notes_for_spring_boot_2.7/index 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY+FwUdzjgjWX9erEAQjFqw//f+Uqe73F+me6wUuE/C1OCHSgXDqEZYZd N0jC65ebt2AT1aSettVnT+ZO+YZQ12PpZV/e23F32gR4EhmNFQtkqG4yBBp4oJ+0 5lKCl1DSylWTl1NeLDeI26WjnqpXF1LQHIEco+0qu//OZBXAnjJ3cAncx2NmRHC0 R7REST1ilC3gJ6ALuV5SgJAbGl6A8eG0F05smX2ZPBf6KDVIIvHpxFL0NlOIVHRD e1ZKfGVtKR43KDvqp5/DXCvRAKIUdNe/Hftl7FiZsJsxJ02GjiTH2EJ2797nYaJw DAEZ9alH5FZ9HDsUOWZO+3eHkc49QbWgHzI81FJAlVRzjxfyjHESGmk7l6OrFbmD cNjljrD11iEtyMCCofnkLfYiGCv+OFQxC4eAJ/Vqxy/oS4mIx4dExUU8Sf+Edx47 57zLfJa1MPXSvleWfOFwQbnTz3LZ60CIvdrdVqtWwWWqfT3cROn4bslP2Xu0JRul +bN6wi29jKV8av+eYf6xNRCc5ikcYeIppLNK18M3Z4n3+dOLbQwKLnK2O3UoMHBx ZdOU1dBRMAYsIV106v4UvjirsQ2PPTOOBWiuzZVHfg133wqMLHDorPUsoZSBktsM NUiyn+gEtEbSquBIfmD4tiMBPiFELw2FvaNs+AK/+d/L9oyXcXB4xATgvN65TnU/ U5ux9Itu+MI=VP/1 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 06, 2023
•Important
Red Hat
98
security advisorysoftware updatesecurity fixRed Hat OpenShift 4.8.57 RHSA-2023:0237-01 Important: Authentication Bypass
Red Hat OpenShift Container Platform release 4.8.57 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: OpenShift Container Platform 4.8.57 security update Advisory ID: RHSA-2023:0237-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2023:0237 Issue date: 2023-01-25 CVE Names: CVE-2022-41912 CVE-2023-21835 CVE-2023-21843 ==================================================================== 1. Summary: Red Hat OpenShift Container Platform release 4.8.57 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Security Fix(es): * crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements (CVE-2022-41912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errataupdate: https://docs.redhat.com/en/documentation/openshift_container_platform/4.8/html/release_notes/ocp-4-8-release-notes You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, and ppc64le architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags The sha values for the release are: (For x86_64 architecture) The image digest is sha256:c9dfdaa23f71c5faf6cc88a3cc504f7458840b8c860372a8106584739a15b1f2 (For s390x architecture) The image digest is sha256:ff2557359193568edf71a6160b0d431c01625578fc29ca6c8894f2e46719b475 (For ppc64le architecture) The image digest is sha256:cfbc2bf134d9a7754a920164bd8189f2f5b5d802c25c0774ab3b4e9c1998ff51 All OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.8/html/updating_clusters/updating-cluster-cli 4. Bugs fixed (https://bugzilla.redhat.com/): 2149181 - CVE-2022-41912 crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements 5. JIRA issues fixed (https://issues.redhat.com/): OCPBUGS-5964 - Placeholder bug for OCP 4.8.0 metadata release OCPBUGS-5965 - Placeholder bug for OCP 4.8.0 rpm release 6. References: https://access.redhat.com/security/cve/CVE-2022-41912 https://access.redhat.com/security/cve/CVE-2023-21835 https://access.redhat.com/security/cve/CVE-2023-21843 https://access.redhat.com/security/updates/classification/#important 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY9FaPdzjgjWX9erEAQg0vw//QzuA21utuuPcMS2hskt1IACyRPrP2e1r iWod7sJFac91fcGCq43e4dyc0IUeurEHAh7syX5g9UBaDt1IReTUsF5Fwolbi8js Q2xTi8TyYuCqYKpl8yzXXKRu/vd32HfsOhe1W8pyzT77PcPf5QlX329GnMUUsyrr l/3eNwRn/eIRWqGXPBFzRM+NVBbLAZ5J17Wpdqu7Ghu+11xSU7cAhrk1BjFaNxHy u/s5PLDtz1tCjf8pU8MdkBe/DVWUDCkR1QvPqj5GDRHK/Vq0gyvhX2+m3nDi1VlF 2XNMy+PVlmnlAoLtRWcaazTvE8VR0aaxyB6iOZQMcDrUMJS+wJD5Oo/zcGjvVNpM oXhuSpnkLSEAzb1Z4a0NIdx9hJGP4j252RJYzx4GumwpiNaU4xMr4DoFB/cRE11H b2c45+iX1n/Dnj8LaJLUdCSKAHqrFB4gGSjKTlV3KO/xGIYTPn30MSOAGYWR9oDf zaPX1AdgNBoQ43gbKP2Uj7/S7iHN575P7t1B1Bfi+Bdgxo6U0sRlgC51LEVCqTtD 49NkFFzmFQr3KCFIDuHIQaNRyyPU3skAf7mKqUJGblkrbAolZ3Gc+a0RK9kmlx0j cdOK6ev73xCs/Ad5SmynJRXTrZB3dmOzh5Gk6QpOAFzPbJr30Qt1dfqAsq7hsVxb wNvLA5dg5i8=WVbV -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 25, 2023
•Important
Red Hat
98
security advisorysecurity impactimportant updateRed Hat OpenShift: 2.0.4 Advisory RHSA-2021-1544 Important Security Impact
An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenShift Service Mesh 2.0.4 security update Advisory ID: RHSA-2021:1544-01 Product: Red Hat OpenShift Service Mesh Advisory URL: https://access.redhat.com/errata/RHSA-2021:1544 Issue date: 2021-05-11 CVE Names: CVE-2021-3495 ==================================================================== 1. Summary: An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. Security Fix(es): * kiali/kiali-operator: can deploy specified image to any namespace (CVE-2021-3495) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 1947361 - CVE-2021-3495 kiali/kiali-operator: can deploy specified image to any namespace 5.References: https://access.redhat.com/security/cve/CVE-2021-3495 https://access.redhat.com/security/updates/classification#important 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYJsWltzjgjWX9erEAQisCQ//WRRa5pa3Fo3scw5X1CFEBrlANCrjzI3Z 5in8b/Qx/8uEtiQYCARRCNxEsN3TsYt4ZOJca3bHuWWPdkI0NNf0/fTVIBky1D80 3HOiheI4Z0BC9OUI8zegB9NgPlj26Y+FeILO5XdUD9EUp3/2g07i4hhrqqYQOJic UqSXaT7pzLP499WkwGKArp9A+6dPpXz+eXFZ8J1w0snSJ1DOQRH6F0SSWrGXvpVv xtxZ29gF9TTfp8Kp89zHhxA+pTVHP9R/9Jt00Hl6Xeg+sVNmJX9YXxKpnYTEvpmk grtcqGBr9mvFb724A0zISYbus9a7WslQttVdcCvwaOWlwW0oL+0xLI+UnsKhKHWh WK1taAidCEJi54A72+AKNHbhvGC6GEBpKEvPQes/6o3rEEl/XGTosQn5TOLI7AJd 4KRg2AlPYT16Z71jXDEyfNUF3P7RueI+KtqxcdKVpZxN+kflGheGoElsaXd2t1Sl 1S7AuPiMX09M0JboAdZTzGl56854npfrZVW3C7wUc35zjzE/q6PJJ78vdHARUFES w8xvkTOpeH+ZHW+wltCXgDV7Lt2nr8fHH6lW87wEYAENcYzVlKs5lt+YMEVclvw6 22nRYjaG2XkOinMRujLfd4sYBbyQwyWNj98kdJ3U10BCM+NawHxWqXupAjMiOJuy UDewTgiYMgY=zi76 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 11, 2021
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!