Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.4 (etcd) security update
An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15136US | medium6.5OT erhöht | — | ||
In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will onl… | ||||
| CVE-2020-15114US | high7.7 | — | ||
In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway ad… | ||||
| CVE-2020-15115US | high7.5 | — | ||
etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short passwords, such as those with a length of one. This may allow an… | ||||
| CVE-2020-15113US | high7.1 | — | ||
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certi… | ||||
| CVE-2020-15112US | medium6.5 | — | ||
In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues whe… | ||||
| CVE-2020-15106US | medium6.5 | — | ||
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional val… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2021:0916self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1868870external
- 1868872external
- 1868874external
- 1868878external
- 1868880external
- 1868883external
Behebungen (42)
- Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debuginfo-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916 - Behobenetcd-debugsource-0:3.3.23-1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0916
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan