Lucene search

K
redhatRedHatRHSA-2023:1486
HistoryMar 28, 2023 - 12:06 a.m.

(RHSA-2023:1486) Important: Red Hat Gluster Storage web-admin-build security update

2023-03-2800:06:18
access.redhat.com
34
red hat gluster storage
web admin
puma
ruby
moment
django
security vulnerabilities
cve
unix

0.009 Low

EPSS

Percentile

83.3%

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don’t Repeat Yourself) principle.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • puma-5.6.4: http request smuggling vulnerabilities (CVE-2022-24790)

  • rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123)

  • moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

  • rubygem-tzinfo: arbitrary code execution (CVE-2022-31163)

  • rubygem-rack: crafted multipart POST request may cause a DoS (CVE-2022-30122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.