RHSA-2023:2193: Moderate: butane security, bug fix, and enhancement update
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition.The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475)Security Fix(es): golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:2193?
The severity of RHSA-2023:2193 is classified as moderate.
How do I fix RHSA-2023:2193?
To fix RHSA-2023:2193, upgrade the butane package to version 0.16.0-1.el9 or later.
What packages are affected by RHSA-2023:2193?
The affected packages include butane, butane-debuginfo, and butane-debugsource for various architectures.
Is there any workaround for RHSA-2023:2193?
No specific workarounds are mentioned for RHSA-2023:2193; upgrading is recommended.
When was RHSA-2023:2193 released?
RHSA-2023:2193 was released on the date corresponding with the notification about the vulnerability.