الوصف:

أصدرت Red Hat عدة تحديثات لمعالجة عدد من الثغرات في عدد من المنتجات، من أبرزها:

• Red Hat OpenShift GitOps
• Important: rh-mariadb103-mariadb and rh-mariadb103-galera
  • Red Hat Software Collections (for RHEL Workstation)
• dotnet3.1
  • Red Hat Enterprise Linux Server - TUS
• dotnet5.0
  • Red Hat Enterprise Linux Server - TUS
• xorg-x11-server
  • Red Hat Enterprise Linux Workstation
• slapi-nis
  • Red Hat Enterprise Linux Workstation
  • Red Hat Enterprise Linux Server
• bind
  • Red Hat Enterprise Linux for ARM 64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for IBM z Systems
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
• ipa
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux Server – TUS
• squid:4
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
• OpenShift Serverless 1.10.2
  • Red Hat Openshift Serverless
• idm:DL1
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for ARM 64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
  • Red Hat Enterprise Linux for IBM z Systems
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• هجمة حجب الخدمة (DoS attack)
• تنفيذ برمجيات خبيثة
• رفع الصلاحيات لزيادة قدرته على التعديل في النظام
• تجاوز آلية حماية

الإجراءات الوقائية:

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرتRed Hat توضيحًا لهذه التحديثات:

• https://access.redhat.com/errata/RHSA-2021:1983
• https://access.redhat.com/errata/RHSA-2021:1989
• https://access.redhat.com/errata/RHSA-2021:2021
• https://access.redhat.com/errata/RHSA-2021:2024
• https://access.redhat.com/errata/RHSA-2021:2025
• https://access.redhat.com/errata/RHSA-2021:2026
• https://access.redhat.com/errata/RHSA-2021:2027
• https://access.redhat.com/errata/RHSA-2021:2028
• https://access.redhat.com/errata/RHSA-2021:2032
• https://access.redhat.com/errata/RHSA-2021:2033
• https://access.redhat.com/errata/RHSA-2021:2036
• https://access.redhat.com/errata/RHSA-2021:2037
• https://access.redhat.com/errata/RHSA-2021:2039
• https://access.redhat.com/errata/RHSA-2021:2040
• https://access.redhat.com/errata/RHSA-2021:2041
• https://access.redhat.com/errata/RHSA-2021:2042
• https://access.redhat.com/errata/RHSA-2021:1551
• https://access.redhat.com/errata/RHSA-2021:1552
• https://access.redhat.com/errata/RHSA-2021:2046
• https://access.redhat.com/errata/RHSA-2021:2047
• https://access.redhat.com/errata/RHSA-2021:2048
• https://access.redhat.com/errata/RHSA-2021:2051
• https://access.redhat.com/errata/RHSA-2021:2053