Red Hat Security AdvisoryRHSA-2023:0632
Red Hat OpenShift (Logging Subsystem) security update
Released 2023-02-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHOL 5.4 for RHEL 8 openshift-logging/fluentd-rhel8, openshift-logging/lokistack-gateway-rhel8
Fixes 2 records
Priority MEDIUM 47
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01955 · Published 2022-12-05 · Partial fix · 2.0.9.1, 2.1.4.1 +1 CWE-150
Priority LOW 33
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06077 · Published 2022-12-08 · Partial fix · 1.18.9, 1.19.4 +1 CWE-770
