RHSA-2023:0632: Moderate: Red Hat OpenShift (Logging Subsystem) security update
Logging Subsystem 5.4.11 - Red Hat OpenShiftSecurity Fix(es): rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123) golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0632?
The severity of RHSA-2023:0632 is classified as moderate.
What vulnerabilities are addressed in RHSA-2023:0632?
RHSA-2023:0632 addresses vulnerabilities in rubygem-rack that allow crafted requests to cause shell escape sequences and excessive memory growth in the Go server.
How do I fix RHSA-2023:0632?
To fix RHSA-2023:0632, update the affected packages as recommended in the advisory.
Which software does RHSA-2023:0632 affect?
RHSA-2023:0632 affects the Logging Subsystem version 5.4.11 in Red Hat OpenShift.
Is RHSA-2023:0632 related to CVE-2022-30123?
Yes, RHSA-2023:0632 includes a fix for CVE-2022-30123 related to rubygem-rack vulnerabilities.