Description:

Red Hat has released security updates to address several vulnerabilities in the following products:

• OpenShift Serverless 1.14.0
  • Red Hat Openshift Serverless
  • Red Hat OpenShift Serverless for IBM Z and LinuxONE
  • Red Hat OpenShift Serverless for IBM Power, little endian
  • OpenShift Serverless Client kn 1.14.0
• Ansible
  • Red Hat Ansible Engine
• thunderbird
  • Red Hat Enterprise Linux Desktop
  • Red Hat Enterprise Linux for ARM 64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux Server
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Workstation
• xstream
  • Red Hat Enterprise Linux Desktop
  • Red Hat Enterprise Linux for IBM z Systems
  • Red Hat Enterprise Linux for Power, big endian
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux for Scientific Computing
  • Red Hat Enterprise Linux Server
  • Red Hat Enterprise Linux Workstation
• firefox
  • Red Hat Enterprise Linux Desktop
  • Red Hat Enterprise Linux for ARM 64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for IBM z Systems
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
  • Red Hat Enterprise Linux for Power, big endian
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux Server
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
  • Red Hat Enterprise Linux Workstation
• Red Hat Advanced Cluster Management 2.1.6
  • Red Hat Advanced Cluster Management for Kubernetes
• OpenShift Container Platform 4.7.8
  • Red Hat OpenShift Container Platform for Power
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE
  • Red Hat OpenShift Container Platform
• kernel
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux Server - TUS
• kpatch-patch
  • Red Hat Enterprise Linux Server - TUS
• kernel-alt
  • Red Hat Enterprise Linux for IBM System z (Structure A)

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Execute arbitrary code
• Unauthorized disclosure of information
• Escalation of privilege

Best practice and Recommendations:

The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:

• https://access.redhat.com/errata/RHSA-2021:1339
• https://access.redhat.com/errata/RHSA-2021:1342
• https://access.redhat.com/errata/RHSA-2021:1343
• https://access.redhat.com/errata/RHSA-2021:1350
• https://access.redhat.com/errata/RHSA-2021:1351
• https://access.redhat.com/errata/RHSA-2021:1352
• https://access.redhat.com/errata/RHSA-2021:1353
• https://access.redhat.com/errata/RHSA-2021:1361
• https://access.redhat.com/errata/RHSA-2021:1362
• https://access.redhat.com/errata/RHSA-2021:1363
• https://access.redhat.com/errata/RHSA-2021:1369
• https://access.redhat.com/errata/RHSA-2021:1227
• https://access.redhat.com/errata/RHSA-2021:1225
• https://access.redhat.com/errata/RHSA-2021:1373
• https://access.redhat.com/errata/RHSA-2021:1376
• https://access.redhat.com/errata/RHSA-2021:1377
• https://access.redhat.com/errata/RHSA-2021:1379