الوصف:

أصدرت Red Hat عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:

• Red Hat OpenShift Service Mesh 1.1 for RHEL 8 x86_64
• RRed Hat Single Sign-On Text-Only Advisories x86_64
• JBoss Enterprise Application Platform 7.3 for RHEL 8 x86_64
• JBoss Enterprise Application Platform 7.3 for RHEL 7 x86_64
• JBoss Enterprise Application Platform 7.3 for RHEL 6 x86_64
• JBoss Enterprise Application Platform 6.4 for RHEL 7 x86_64
• JBoss Enterprise Application Platform 6.4 for RHEL 6 x86_64
• JBoss Enterprise Application Platform 6 for RHEL 7 x86_64
• JBoss Enterprise Application Platform 6 for RHEL 6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.7 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.7 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.7 ppc64le
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.6 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.6 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.6 ppc64le
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le
• Red Hat Software Collections (for RHEL Server for ARM) 1 aarch64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• تنفيذ يرمجيات خبيثة - عن بعد
• هجمة حجب الخدمة (DoS attack)
• هجمة البرمجة عبر المواقع ((Cross-site scripting (XSS)

الإجراءات الوقائية:

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرتRed Hat توضيحًا لهذه التحديثات:

• https://access.redhat.com/errata/RHSA-2020:2795
• https://access.redhat.com/errata/RHSA-2020:2796
• https://access.redhat.com/errata/RHSA-2020:2798
• https://access.redhat.com/errata/RHSA-2020:2799
• https://access.redhat.com/errata/RHSA-2020:2813
• https://access.redhat.com/errata/RHSA-2020:2814
• https://access.redhat.com/errata/RHSA-2020:2816
• https://access.redhat.com/errata/RHSA-2020:2817