Red Hat Security Advisory

RHSA-2023:4341

Logging Subsystem 5.7.4 - Red Hat OpenShift bug fix and security update

Released 2023-08-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.7 for RHEL 8 openshift-logging/fluentd-rhel8, openshift-logging/logging-view-plugin-rhel8

Fixes 2 records

TI-2022-09442 CVE-2022-25883 · GHSA-c2qf-rxjj-qqgw

Regular expression denial of service in semver

HIGH 72

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2023-06-21 Partial fix · 7.5.2, 6.3.1 +1 CWE-1333

TI-2023-08968 CVE-2023-22796 · GHSA-j6gc-792m-qgm2

Uncontrolled resource consumption in https://github.com/rails/rails

MEDIUM 42

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01712 Published 2023-02-09 Partial fix · 6.1.7.1, 7.0.4.1 CWE-400