RHSA-2023:0632: Moderate: Red Hat OpenShift (Logging Subsystem) security update

Published Feb 15, 2023

Updated

Logging Subsystem 5.4.11 - Red Hat OpenShiftSecurity Fix(es): rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123) golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift

Event History

Feb 15, 2023

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:0632?

The severity of RHSA-2023:0632 is classified as moderate.

What vulnerabilities are addressed in RHSA-2023:0632?

RHSA-2023:0632 addresses vulnerabilities in rubygem-rack that allow crafted requests to cause shell escape sequences and excessive memory growth in the Go server.

How do I fix RHSA-2023:0632?

To fix RHSA-2023:0632, update the affected packages as recommended in the advisory.

Which software does RHSA-2023:0632 affect?

RHSA-2023:0632 affects the Logging Subsystem version 5.4.11 in Red Hat OpenShift.

Is RHSA-2023:0632 related to CVE-2022-30123?

Yes, RHSA-2023:0632 includes a fix for CVE-2022-30123 related to rubygem-rack vulnerabilities.