RHSA-2022:7242HighCVSS 7.5
Red Hat Security Advisory: Satellite 6.11.4 Async Security Update
🔗 CVE IDs covered (2)
📋 Description
CVE-2022-30122 — rubygem-rack: crafted multipart POST request may cause a DoS CVE-2022-31163 — rubygem-tzinfo: arbitrary code execution
🔗 References (18)
- selfhttps://access.redhat.com/errata/RHSA-2022:7242
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2099519
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2110551
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2122205
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131757
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131759
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131761
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131763
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131769
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131771
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131773
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131776
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131781
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131788
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2131790
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2132999
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7242.json