Skip to content
OpenAdvisories
High RHSA-2022:7242 2 CVEs

Red Hat Security Advisory: Satellite 6.11.4 Async Security Update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.11::el7 tfm-rubygem-rack 0:2.2.3.1-1.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.11::el8 rubygem-rack 0:2.2.3.1-1.el8sat
Red Hat · Satellite 6 satellite:6.11::el7 tfm-rubygem-rack 0:2.2.3.1-1.el7sat
Red Hat · Satellite 6 satellite:6.11::el7 tfm-rubygem-tzinfo 0:1.2.10-1.el7sat
Red Hat · Satellite 6 satellite:6.11::el8 rubygem-rack 0:2.2.3.1-1.el8sat
Red Hat · Satellite 6 satellite:6.11::el8 rubygem-tzinfo 0:1.2.10-1.el8sat

Vulnerabilities 2

  • High 7.5
    CVE-2022-30122

    Denial of Service Vulnerability in Rack Multipart Parsing

    A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2022-31163

    TZInfo relative path traversal vulnerability allows loading of arbitrary files

    TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path…

    tzinfo tzinfo tzinfo ruby-tzinfo Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2099519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2110551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2122205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131773
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131788
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2132999
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7242.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-30122
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30122
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30122
  • article
    https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-30122.yml
  • report
    https://access.redhat.com/security/cve/CVE-2022-31163
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-31163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-31163
  • article
    https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx