Red Hat Update
1984Warning Date
Severity Level
Warning Number
Target Sector
29 April, 2021
● High
2021-2848
All
Description:
Red Hat has released a security update to address a vulnerabilities in the following products:
- OpenJDK Java (for Middleware) 1 x86_64
- Red Hat Advanced Cluster Management for Kubernetes 2.0 for RHEL 8 x86_64
- Red Hat Advanced Cluster Management for Kubernetes 2.0 for RHEL 7 x86_64
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Ceph Storage MON 4 for RHEL 8 x86_64
- Red Hat Ceph Storage MON 4 for RHEL 7 x86_64
- Red Hat Ceph Storage OSD 4 for RHEL 8 x86_64
- Red Hat Ceph Storage OSD 4 for RHEL 7 x86_64
- Red Hat Enterprise Linux for x86_64 8 x86_64
- Red Hat Ceph Storage for Power 4 for RHEL 8 ppc64le
- Red Hat Ceph Storage for Power 4 for RHEL 7 ppc64le
- Red Hat Ceph Storage MON for Power 4 for RHEL 8 ppc64le
- Red Hat Ceph Storage MON for Power 4 for RHEL 7 ppc64le
- Red Hat Ceph Storage OSD for Power 4 for RHEL 8 ppc64le
- Red Hat Ceph Storage OSD for Power 4 for RHEL 7 ppc64le
- Red Hat Ceph Storage for IBM z Systems 4 s390x
- Red Hat Ceph Storage MON for IBM z Systems 4 s390x
- Red Hat Ceph Storage OSD for IBM z Systems 4 s390x
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized modification
- Sensitive information disclosure
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates: