Your review has been sent successfully

RedHat Alert

3289
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

Critical

High

Medium

Low

Warning Date

Severity Level

Warning Number

Target Sector

22 March, 2022

● High

2022-4547

All

Description:

Red Hat has released security updates to address several vulnerabilities in the following products:

  • OpenShift Container Platform 4.10.5 packages
    • Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
    • Red Hat OpenShift Container Platform 4.10 for RHEL 7 x86_64
    • Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
    • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
    • Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64
  • OpenShift Container Platform 4.9.25
    • Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
    • Red Hat OpenShift Container Platform 4.9 for RHEL 7 x86_64
    • Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
    • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x
    • Red Hat OpenShift Container Platform for ARM 64 4.9 aarch64
  • virt:av and virt-devel:av qemu-kvm
    • Red Hat Enterprise Linux Advanced Virtualization 8 x86_64
    • Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM Power LE) 8 ppc64le
    • Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for ARM 64) 8 aarch64
    • Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM System Z) 8 s390x
    • Red Hat Enterprise Linux Advanced Virtualization EUS 8.4 x86_64
    • Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM Power LE) EUS 8.4 ppc64le
    • Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM System Z) EUS 8.4 s390x
  • java-1.8.0-ibm
    • Red Hat Enterprise Linux for x86_64 8 x86_64
    • Red Hat Enterprise Linux for IBM z Systems 8 s390x
    • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • java-1.7.1-ibm
    • Red Hat Enterprise Linux Server 7 x86_64
    • Red Hat Enterprise Linux Workstation 7 x86_64
    • Red Hat Enterprise Linux Desktop 7 x86_64
    • Red Hat Enterprise Linux for IBM z Systems 7 s390x
    • Red Hat Enterprise Linux for Power, big endian 7 ppc64
    • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
    • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • java-1.8.0-ibm
    • Red Hat Enterprise Linux Server 7 x86_64
    • Red Hat Enterprise Linux Workstation 7 x86_64
    • Red Hat Enterprise Linux Desktop 7 x86_64
    • Red Hat Enterprise Linux for IBM z Systems 7 s390x
    • Red Hat Enterprise Linux for Power, big endian 7 ppc64
    • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
    • Red Hat Enterprise Linux for Power, little endian 7 ppc64leThreats:

An attacker could exploit these vulnerabilities by doing the following:

  • Execute Arbitrary Code
  • Buffer Overflow

Best practice and Recommendations:

The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:

Last updated at 22 March, 2022

Rate the content

rate-icon
up icon