الوصف:

أصدرت Red Hat عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:

• kpatch-patch
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
• dbus
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
• python-pillow
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
• JBoss Web Server 3.1 Service Pack 10
  • JBoss Enterprise Web Server
• Red Hat JBoss Web Server 5.3.2
  • JBoss Enterprise Web Server
• RHV Manager (ovirt-engine) 4.4
  • Red Hat Virtualization Manager

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• هجمة حجب الخدمة (DoS attack)
• الكشف والإفصاح غير المصرح به للمعلومات

الإجراءات الوقائية:

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرتRed Hat توضيحًا لهذه التحديثات:

• https://access.redhat.com/errata/RHSA-2020:3297
• https://access.redhat.com/errata/RHSA-2020:3298
• https://access.redhat.com/errata/RHSA-2020:3299
• https://access.redhat.com/errata/RHSA-2020:3302
• https://access.redhat.com/errata/RHSA-2020:3303
• https://access.redhat.com/errata/RHSA-2020:3305
• https://access.redhat.com/errata/RHSA-2020:3306
• https://access.redhat.com/errata/RHSA-2020:3308
• https://access.redhat.com/errata/RHSA-2020:3247