Red Hat Security Advisory

RHSA-2023:1953

Logging Subsystem 5.6.5 - Red Hat OpenShift security update

Released 2023-04-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2023-12699 CVE-2023-28120 · GHSA-pj73-v5mw-pm9j

LOW 26

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00948 Published 2025-01-09 Partial fix · 7.0.4.3, 6.1.7.3 CWE-79

TI-2023-12263 CVE-2023-27539 · GHSA-c6qg-cjj8-47qp

LOW 26

There is a denial of service vulnerability in the header parsing component of Rack.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01058 Published 2025-01-09 Partial fix · 2.2.6.4, 3.0.6.1