Red Hat Updates
2329Warning Date
Severity Level
Warning Number
Target Sector
18 March, 2020
● High
2020-1038
All
Description:
Red Hat has released security updates to address vulnerabilities in the following products:
- kernel
- Red Hat Enterprise Linux Server - Update Services for SAP Solutions
- java-1.8.0-ibm
- Red Hat Satellite
- Red Hat JBoss Web Server 3.1 Service Pack 8
- JBoss Enterprise Web Server
- kernel-rt
- Red Hat Enterprise Linux for Real Time
- python-pip
- Red Hat Enterprise Linux Workstation
- python-flask
- Red Hat Enterprise Linux Server
- Red Hat Enterprise Linux for IBM z Systems
- slirp4netns
- Red Hat Enterprise Linux Workstation
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Buffer overflow
- Denial of service attack (DoS)
- Bypass of a protection mechanism
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:
- https://access.redhat.com/errata/RHSA-2020:0831
- https://access.redhat.com/errata/RHSA-2020:0856
- https://access.redhat.com/errata/RHSA-2020:0860
- https://access.redhat.com/errata/RHSA-2020:0861
- https://access.redhat.com/errata/RHSA-2020:0839
- https://access.redhat.com/errata/RHSA-2020:0850
- https://access.redhat.com/errata/RHSA-2020:0870
- https://access.redhat.com/errata/RHSA-2020:0889