Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
98
security advisorymoderate severitydata exposureRed Hat OpenStack Platform 10 RHSA-2018:1606-01 Moderate Sensu Data Leak
An update for sensu is now available for Red Hat OpenStack Platform 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: sensu security update Advisory ID: RHSA-2018:1606-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2018:1606 Issue date: 2018-05-17 CVE Names: CVE-2018-1000060 ==================================================================== 1. Summary: An update for sensu is now available for Red Hat OpenStack Platform 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7 - noarch 3. Description: Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security fix(es): * Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text. (CVE-2018-1000060) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 1541402 - CVE-2018-1000060 sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections 6. Package List: Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7: Source: sensu-0.23.2-4.el7ost.src.rpm noarch: sensu-0.23.2-4.el7ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-1000060 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBWv2fD9zjgjWX9erEAQiNSg//Rz4Bkv3Gw5hc/jrTZym62S8YOA+OrJcN pAEOGwiNKlJOyN7xTJxX/aejeUjSi0qxbwNJXAI7stRmgdT8BRlOo/irPtvZCbRA EiTOLZjTZfqK9soSYSP/qKRjap2ZOh7iQ1Tf4b/Q7WWLd3a7NvtA8uQB0ZCRUgVe 2OBArtvx/HNV6kgUhsx6JkzY8dzbvA8g42NdE7RRt2uSOVCeBL3xZcU2sKEk6755 wF3oD3qkArkm7ZBWS3r6HJfkKbpGZiFgxrk86RWfYhRODVqTvYFMrSwuhyj8GGD9 Xoy3FRIC1AFLZHMLhZnrxfoJSClE3wZzLPkViBI9bsp4k4saU55JtY1J6CgJOqhD XQg7zdiqzhRmPvJDv4CRQHQfcXfO71cSf78ZnXIAIwstYM16Ghd8tMeFoJh/t/Uo f9iQKpQFcEEp8U1VBt1UGyWQq0vo6lsAiq83BqMVs49YKFAvXehQ//6YF1EK4ols UP1pt7U0xrtPT4z/LckFJaKzanc9FnpLHITca7o1iswrGW9sy4jU8WngyHzyKNuG zR5SlZtBAQzG0eHKqwj0B4rO7CTAo/CtOOTcwpGaP6tw4vb9EZeGV5PidVfCoI9U j+8rB7BF4AtmQPmT9F+F3CFcI82OWXj4xlHLuyibMcZ3wTsXJcvpHJ1icjB3JrGE o96afK89LN8=mASi -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 17, 2018
Red Hat
98
security advisorysecurity fixmoderate severityRed Hat OpenStack 11.0 RHSA-2018-1112-01 Moderate Sensu Security Fix
An update for sensu is now available for Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: sensu security update Advisory ID: RHSA-2018:1112-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2018:1112 Issue date: 2018-04-11 CVE Names: CVE-2018-1000060 ==================================================================== 1. Summary: An update for sensu is now available for Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7 - noarch 3. Description: Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security Fix(es): * Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text. (CVE-2018-1000060) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Debashis Pradhan (Huawei Technologies) for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 1541402 - CVE-2018-1000060 sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections 6. Package List: Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7: Source: sensu-0.27.0-4.el7ost.src.rpm noarch: sensu-0.27.0-4.el7ost.noarch.rpm sensu-common-0.27.0-4.el7ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-1000060 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFazkneXlSAg2UNWIIRAl8mAJ0bGMZ9hwnNheZrjjA0zqOd0jzdUwCfdevu a3tZ4DxIeNnfYzlDxwBQIyU=mYJC -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 11, 2018
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!