RHSA-2023:1486: Important: Red Hat Gluster Storage web-admin-build security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle.Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.Security Fix(es): puma-5.6.4: http request smuggling vulnerabilities (CVE-2022-24790) rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123) moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129) rubygem-tzinfo: arbitrary code execution (CVE-2022-31163) rubygem-rack: crafted multipart POST request may cause a DoS (CVE-2022-30122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1486?
The severity of RHSA-2023:1486 is classified as moderate.
How do I fix RHSA-2023:1486?
To fix RHSA-2023:1486, update the affected packages to their latest secured versions as specified in the advisory.
Which software is affected by RHSA-2023:1486?
RHSA-2023:1486 affects Grafana, Python Django, Ruby, and multiple Ruby gems on Red Hat Enterprise Linux 7.
What are the recommended actions for RHSA-2023:1486?
The recommended action for RHSA-2023:1486 is to apply the security updates provided by Red Hat to mitigate the vulnerabilities.
Is there a workaround for RHSA-2023:1486?
There are no specific workarounds mentioned for RHSA-2023:1486; the advised method is to update the affected software packages.