RHSA-2023:3495MediumCVSS 7.5
Red Hat Security Advisory: Logging Subsystem 5.7.2 - Red Hat OpenShift security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding CVE-2023-27539 — rubygem-rack: denial of service in header parsing CVE-2023-28120 — rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice
🔗 References (29)
- selfhttps://access.redhat.com/errata/RHSA-2023:3495
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2178358
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2179637
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2179649
- externalhttps://issues.redhat.com/browse/LOG-3314
- externalhttps://issues.redhat.com/browse/LOG-3316
- externalhttps://issues.redhat.com/browse/LOG-3330
- externalhttps://issues.redhat.com/browse/LOG-3445
- externalhttps://issues.redhat.com/browse/LOG-3749
- externalhttps://issues.redhat.com/browse/LOG-3784
- externalhttps://issues.redhat.com/browse/LOG-3827
- externalhttps://issues.redhat.com/browse/LOG-3878
- externalhttps://issues.redhat.com/browse/LOG-3945
- externalhttps://issues.redhat.com/browse/LOG-3997
- externalhttps://issues.redhat.com/browse/LOG-4011
- externalhttps://issues.redhat.com/browse/LOG-4019
- externalhttps://issues.redhat.com/browse/LOG-4027
- externalhttps://issues.redhat.com/browse/LOG-4049
- externalhttps://issues.redhat.com/browse/LOG-4052
- externalhttps://issues.redhat.com/browse/LOG-4098
- externalhttps://issues.redhat.com/browse/LOG-4151
- externalhttps://issues.redhat.com/browse/LOG-4163
- externalhttps://issues.redhat.com/browse/LOG-4185
- externalhttps://issues.redhat.com/browse/LOG-4218
- externalhttps://issues.redhat.com/browse/LOG-4219
- externalhttps://issues.redhat.com/browse/LOG-4220
- externalhttps://issues.redhat.com/browse/LOG-4221
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3495.json