Red Hat Alert
2297Warning Date
Severity Level
Warning Number
Target Sector
2 October, 2022
● High
2022-5297
All
Red Hat has released security updates to address several vulnerabilities in the following products:
- Red Hat OpenStack Platform (openstack-barbican)
- Red Hat OpenStack 17 x86_64
- Red Hat OpenStack 16.2 x86_64
- Red Hat OpenStack 16.1 x86_64
- Red Hat OpenStack for IBM Power 16.2 ppc64le
- Red Hat OpenStack for IBM Power 16.1 ppc64le
- Red Hat OpenStack 13 - Extended Life Cycle Support 13 x86_64
- Red Hat OpenStack 13 for IBM Power - Extended Life Cycle Support 13 ppc64le
- kernel
- Red Hat Enterprise Linux Server - AUS 7.7 x86_64
- Red Hat Enterprise Linux Server - TUS 7.7 x86_64
- Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
- Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
An attacker could exploit these vulnerabilities by doing the following:
- Authentication bypass
- Privilege escalation
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates: