الموقع الرسمي للمركز الوطني الإرشادي للأمن السيبراني
تنبيه Red Hat
2744
تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
19 مايو, 2022
● عالي
2022-4857
الكل
الوصف:
أصدرت Red Hat عدّة تحديثات لمعالجة عددٍ من الثغرات في المنتجات التالية، أبرزها:
- container-tools:2.0
- Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
- Red Hat Enterprise Linux Server - AUS 8.2 x86_64
- Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
- Red Hat Enterprise Linux Server - TUS 8.2 x86_64
- Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
- Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
- Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.2 x86_64
- kpatch-patch
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
- pcs
- Red Hat Enterprise Linux High Availability for x86_64 8 x86_64
- Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support 8.6 x86_64
- Red Hat Enterprise Linux Resilient Storage for x86_64 8 x86_64
- Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support 8.6 x86_64
- Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8 s390x
- Red Hat Enterprise Linux High Availability for IBM z Systems 8 s390x
- Red Hat Enterprise Linux Resilient Storage for Power, little endian 8 ppc64le
- Red Hat Enterprise Linux Resilient Storage for IBM Power LE - Extended Update Support 8.6 ppc64le
- Red Hat Enterprise Linux High Availability for Power, little endian 8 ppc64le
- Red Hat Enterprise Linux High Availability (for IBM Power LE) - Extended Update Support 8.6 ppc64le
- Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 8.6 ppc64le
- Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 8.6 x86_64
- Red Hat Enterprise Linux High Availability for ARM 64 8 aarch64
- Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support 8.6 s390x
- Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support 8.6 aarch64
- Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support 8.6 s390x
- Red Hat Enterprise Linux High Availability for x86_64 - Telecommunications Update Service 8.6 x86_64
- Red Hat OpenShift GitOps
- Red Hat OpenShift GitOps 1.3 x86_64
- Red Hat OpenShift GitOps 1.5 x86_64
- Red Hat OpenShift GitOps 1.4 x86_64
- OpenShift Container Platform 4.9.33
- Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.9 for RHEL 7 x86_64
- Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x
- Red Hat OpenShift Container Platform for ARM 64 4.9 aarch64
التهديدات:
يمكن للمهاجم استغلال الثغرات من خلال تنفيذ التالي:
- رفع الصلاحيات لزيادة قدرته على التعديل في النظام
- هجمة البرمجة عبر المواقع Cross-site scripting (XSS)
الاجراءات الوقائية:
يوصي المركز بتحديث المنتجات المتأثرة، حيث أصدرت Red Hat توضيحًا لهذه التحديثات، أبرزها:
- https://access.redhat.com/errata/RHSA-2022:4651
- https://access.redhat.com/errata/RHSA-2022:4655
- https://access.redhat.com/errata/RHSA-2022:4661
- https://access.redhat.com/errata/RHSA-2022:4671
- https://access.redhat.com/errata/RHSA-2022:4690
- https://access.redhat.com/errata/RHSA-2022:4691
- https://access.redhat.com/errata/RHSA-2022:4692
- https://access.redhat.com/errata/RHSA-2022:4642
- https://access.redhat.com/errata/RHSA-2022:2205
قيم المحتوى
شارك الصفحة
