- Vulnerability/
- RHSA-2023:2193
RHSA-2023:2193: Moderate: butane security, bug fix, and enhancement update
First published: Tue May 09 2023(Updated: )
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition.<br>The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475)<br>Security Fix(es):<br><li> golang: net/<a href="http:" target="_blank">http:</a> handle server errors after sending GOAWAY (CVE-2022-27664)</li> <li> golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/butane | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debuginfo | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debugsource | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debuginfo | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debugsource | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debuginfo | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane-debugsource | <0.16.0-1.el9 | 0.16.0-1.el9 |
| redhat/butane | <0.16.0-1.el9.aa | 0.16.0-1.el9.aa |
| redhat/butane-debuginfo | <0.16.0-1.el9.aa | 0.16.0-1.el9.aa |
| redhat/butane-debugsource | <0.16.0-1.el9.aa | 0.16.0-1.el9.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2113814
- https://bugzilla.redhat.com/show_bug.cgi?id=2124669
- https://bugzilla.redhat.com/show_bug.cgi?id=2135475
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
- https://access.redhat.com/errata/RHSA-2023:2193 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2023:2193?
The severity of RHSA-2023:2193 is classified as moderate.
How do I fix RHSA-2023:2193?
To fix RHSA-2023:2193, upgrade the butane package to version 0.16.0-1.el9 or later.
What packages are affected by RHSA-2023:2193?
The affected packages include butane, butane-debuginfo, and butane-debugsource for various architectures.
Is there any workaround for RHSA-2023:2193?
No specific workarounds are mentioned for RHSA-2023:2193; upgrading is recommended.
When was RHSA-2023:2193 released?
RHSA-2023:2193 was released on the date corresponding with the notification about the vulnerability.
- agent/references
- agent/severity
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/remedy
- agent/description
- agent/event
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:2193
- agent/software-canonical-lookup
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat