RHSA-2020:4381

csafUSredhat_csaf

Red Hat Security Advisory: openstack-selinux security update

Advisory ansehen veröffentlicht 2020-10-28

An update for openstack-selinux is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-1690USmedium6.5—
An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root a…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • Behobenopenstack-selinux-0:0.8.24-1.20200914163011.26243bf.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:4381
  • Behobenopenstack-selinux-0:0.8.24-1.20200914163011.26243bf.el8ost.src as a component of Red Hat OpenStack Platform 16.1

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:4381
  • Workaroundopenstack-selinux-0:0.8.24-1.20200914163011.26243bf.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1

    There is no known mitigation for this issue, the flaw can only be resolved by applying updates.

  • Workaroundopenstack-selinux-0:0.8.24-1.20200914163011.26243bf.el8ost.src as a component of Red Hat OpenStack Platform 16.1

    There is no known mitigation for this issue, the flaw can only be resolved by applying updates.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan