Red Hat Security AdvisoryRHSA-2022:7242
Satellite 6.11.4 Async Security Update
Released 2022-10-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.11 for RHEL 7 tfm-rubygem-rack-2.2.3.1-1.el7sat, tfm-rubygem-tzinfo-1.2.10-1.el7sat
- Red Hat Satellite 6.11 for RHEL 8 rubygem-rack-2.2.3.1-1.el8sat, rubygem-tzinfo-1.2.10-1.el8sat
Fixes 2 records
Priority HIGH 70
TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02449 · Published 2022-07-21 · Partial fix · 0.3.61, 1.2.10 CWE-22
Priority MEDIUM 43
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02231 · Published 2022-12-05 · Partial fix · 2.0.9.1, 2.1.4.1 +1 CWE-400
