Incorrect Regular Expression in Moment - CVE-2022-31129

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU65835

Incorrect Regular Expression in Moment - CVE-2022-31129

Published: July 27, 2022 / Updated: September 7, 2022


Vulnerability identifier: #VU65835
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-31129
CWE-ID: CWE-185
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper validation of user-supplied input when parsing overly long strings. A remote attacker can pass a string that contains more that 10k characters and perform regular expression denial of service (ReDoS) attack.


Affected software

Moment
IBM VM Recovery Manager DR
IBM VM Recovery Manager HA GUI
Dell Hybrid Client
IBM Watson Machine Learning Accelerator
Tivoli Network Manager IP Edition
IBM Business Automation Manager Open Editions
Oracle Financial Services Analytical Applications Infrastructure
webMethods Managed File Transfer
Oracle Banking Digital Experience
Storage Defender – Data Protect
IBM i Modernization Engine for Lifecycle Integration
Data Virtualization (DV) on Cloud Pak for Data (CPD)
IBM Planning Analytics Workspace
Storage Copy Data Management
IBM Cloud Pak for Watson AIOps
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Tenable.sc
IBM Spectrum Protect for Space Management
mom (Red Hat package)
cockpit-ovirt (Red Hat package)
rhv-log-collector-analyzer (Red Hat package)
ovirt-engine-ui-extensions (Red Hat package)
ovirt-engine-extension-aaa-ldap (Red Hat package)
vdsm-jsonrpc-java (Red Hat package)
ovirt-web-ui (Red Hat package)
servicemesh (Red Hat package)
servicemesh-proxy (Red Hat package)
servicemesh-cni (Red Hat package)
servicemesh-operator (Red Hat package)
servicemesh-ratelimit (Red Hat package)
ovirt-hosted-engine-setup (Red Hat package)
servicemesh-prometheus (Red Hat package)
ovirt-log-collector (Red Hat package)
ovirt-engine (Red Hat package)
ovirt-engine-dwh (Red Hat package)
vdsm (Red Hat package)
postfixadmin (Ubuntu package)
image-sync-formula
saltboot-formula
inter-server-sync-debuginfo
inter-server-sync
rubygem-thread_safe (Red Hat package)
prometheus-formula
grafana-formula
salt-netapi-client
subscription-matcher
rubygem-mustermann (Red Hat package)
virtual-host-gatherer
virtual-host-gatherer-libcloud
virtual-host-gatherer-Kubernetes
virtual-host-gatherer-VMware
virtual-host-gatherer-Nutanix
rubygem-concurrent-ruby (Red Hat package)
ansible-collection-ansible-posix (Red Hat package)
rubygem-tzinfo (Red Hat package)
smdba
rubygem-i18n (Red Hat package)
python-django (Red Hat package)
rubygem-tilt (Red Hat package)
rubygem-rack-protection (Red Hat package)
rubygem-sinatra (Red Hat package)
rubygem-rack (Red Hat package)
rubygem-nio4r (Red Hat package)
ruby (Red Hat package)
cephadm-ansible (Red Hat package)
libjs-moment (Ubuntu package)
node-moment (Ubuntu package)
cobbler
rubygem-bcrypt (Red Hat package)
subscription-manager-cockpit
httpcomponents-asyncclient
susemanager-tftpsync-recv
supportutils-plugin-susemanager
python3-uyuni-common-libs
python3-rhnlib
spacewalk-search
mgr-osad
python3-mgr-osa-common
python3-mgr-osad
mgr-osa-dispatcher
python3-mgr-osa-dispatcher
release-notes-susemanager-proxy
release-notes-susemanager
mgr-daemon
spacewalk-proxy-installer
spacewalk-admin
spacewalk-proxy-broker
spacewalk-proxy-common
spacewalk-proxy-salt
spacewalk-proxy-redirect
spacewalk-proxy-management
spacewalk-proxy-package-manager
python3-spacewalk-certs-tools
spacewalk-certs-tools
spacecmd
python3-spacewalk-check
spacewalk-client-tools
spacewalk-client-setup
python3-spacewalk-client-tools
python3-spacewalk-client-setup
spacewalk-check
susemanager-schema
spacewalk-backend-iss
spacewalk-backend-sql
spacewalk-backend-sql-postgresql
spacewalk-backend-xmlrpc
spacewalk-backend
spacewalk-backend-server
spacewalk-backend-package-push-server
spacewalk-backend-iss-export
spacewalk-backend-config-files-tool
spacewalk-backend-tools
spacewalk-backend-xml-export-libs
spacewalk-backend-config-files-common
spacewalk-backend-config-files
spacewalk-backend-applet
spacewalk-backend-app
susemanager-sls
uyuni-config-modules
spacewalk-base-minimal-config
spacewalk-base-minimal
spacewalk-html
spacewalk-base
susemanager-tools
susemanager
spacewalk-taskomatic
spacewalk-java
spacewalk-java-postgresql
spacewalk-java-lib
spacewalk-java-config
patterns-suma_server
patterns-suma_retail
patterns-suma_proxy
susemanager-docs_en
susemanager-docs_en-pdf
susemanager-doc-indexes
rubygem-puma (Red Hat package)
woodstox
ovirt-host (Red Hat package)
rubygem-activesupport (Red Hat package)
rubygem-activemodel (Red Hat package)
grafana (Red Hat package)
unboundid-ldapsdk (Red Hat package)
python-notebook
drools
susemanager-build-keys
susemanager-build-keys-web
rh-sso7-keycloak (Red Hat package)
py27-compat-salt
IBM Integrated Analytics System
IBM Data Risk Manager
Oracle Utilities Application Framework
Oracle Utilities Testing Accelerator
IBM QRadar DNS Analyzer App
Nessus Network Monitor
IBM Edge Application Manager
Primavera Unifier
IBM Spectrum Protect Backup-Archive Client
IBM Process Mining
Red Hat Advanced Cluster Management for Kubernetes
Oracle Communications Design Studio
Confluence Data Center
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
Oracle Financial Services Enterprise Case Management
Oracle Financial Services Model Management and Governance
Tenable Nessus
Oracle Banking APIs
Oracle Communications Cloud Native Core Binding Support Function
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Netcool Operations Insight
Spectrum Discover
Red Hat Integration - Service Registry
Red Hat OpenShift distributed tracing (RHOSDT)
Qradar Advisor
IBM Guardium Data Encryption (GDE)
QRadar User Behavior Analytics
IBM Watson Assistant for IBM Cloud Pak for Data
IBM Maximo Asset Management
IBM Maximo Application Suite
Bitbucket Data Center
IBM Spectrum Protect Plus
Ceph
OpenShift Service Mesh
Multicluster Engine for Kubernetes
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat Virtualization Host
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Proxy
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy Module
SUSE Manager Server Module
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Fedora
Red Hat Virtualization Manager
Oracle Communications Services Gatekeeper
Oracle Communications Billing and Revenue Management
Red Hat Single Sign-On
Fuse
Primavera Gateway
Bitbucket Server
Confluence Server
MySQL Enterprise Monitor
Splunk Enterprise
Oracle Hospitality Suite8
Oracle Hospitality Simphony
PeopleSoft Enterprise PeopleTools
IBM Cognos Analytics
Orion Platform
Cloud Pak for Security (CP4S)
IBM QRadar Data Synchronization App
Jazz Reporting Service
IBM Cloud Pak System
IBM TRIRIGA Application Platform
IBM Storage Scale System
Red Hat Ceph Storage
Engineering Lifecycle Management

How to mitigate CVE-2022-31129

Install updates from vendor's website.

Moment - update to 2.29.4
Tenable.sc - addressed in versions Patch 202209.1, 5.22.0, 6.0.0
mom (Red Hat package) - update to 0.6.3-1.el8ev
cockpit-ovirt (Red Hat package) - update to 0.16.2-1.el8ev
IBM Integrated Analytics System - update to 1.0.31.0
IBM QRadar DNS Analyzer App - update to 2.0.1
rhv-log-collector-analyzer (Red Hat package) - update to 1.0.15-1.el8ev
ovirt-engine-ui-extensions (Red Hat package) - update to 1.3.5-1.el8ev
ovirt-engine-extension-aaa-ldap (Red Hat package) - update to 1.4.6-1.el8ev
Dell Hybrid Client - update to 2.0
vdsm-jsonrpc-java (Red Hat package) - update to 1.7.2-1.el8ev
ovirt-web-ui (Red Hat package) - update to 1.9.1-1.el8ev
IBM Process Mining - update to 1.13.0.0
OpenShift Service Mesh - addressed in versions 2.0.11, 2.1.5
Multicluster Engine for Kubernetes - addressed in versions 2.0.2, 2.1
servicemesh (Red Hat package) - addressed in versions 2.0.11-1.el8, 2.1.5-1.el8
servicemesh-proxy (Red Hat package) - addressed in versions 2.0.11-1.el8, 2.1.5-1.el8
servicemesh-cni (Red Hat package) - update to 2.0.11-1.el8
servicemesh-operator (Red Hat package) - addressed in versions 2.0.11-1.el8, 2.1.5-1.el8
IBM Data Risk Manager - update to 2.0.6.15
servicemesh-ratelimit (Red Hat package) - update to 2.1.5-1.el8
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.12, 2.4.6, 2.4.8, 2.5.2, 2.6.0, 2.6.2
ovirt-hosted-engine-setup (Red Hat package) - update to 2.6.5-1.1.el8ev
servicemesh-prometheus (Red Hat package) - update to 2.23.0-9.el8
Nessus Network Monitor - addressed in versions 6.1.0, 6.2.0
Tivoli Network Manager IP Edition - update to 4.2.0.20
ovirt-log-collector (Red Hat package) - update to 4.4.7-2.el8ev
ovirt-engine (Red Hat package) - update to 4.5.2.4-0.1.el8ev
ovirt-engine-dwh (Red Hat package) - update to 4.5.4-1.el8ev
vdsm (Red Hat package) - update to 4.50.2.2-1.el8ev
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.1
Red Hat Single Sign-On - update to 7.6.2
Fuse - update to 7.11.1
Confluence Data Center - update to 7.19.26
Confluence Server - update to 7.19.26
IBM Business Automation Manager Open Editions - update to 8.0.1
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
Tenable Nessus - update to 10.3.1
Oracle Communications Billing and Revenue Management - update to 12.0.0.7.0
Orion Platform - update to 2024.4
Automation Assets in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2020.4.1-8, 2022.2.1-1
postfixadmin (Ubuntu package) - update to Ubuntu Pro
image-sync-formula - update to 0.1.1661440526.b08d95b-150300.3.3.2
saltboot-formula - addressed in versions 0.1.1661440526.b08d95b-150300.3.12.2, 0.1.1676908681.e90e0b1-150300.3.15.1
inter-server-sync-debuginfo - addressed in versions 0.2.3-150300.8.22.2, 0.2.7-150300.8.28.2
inter-server-sync - addressed in versions 0.2.3-150300.8.22.2, 0.2.7-150300.8.28.2
rubygem-thread_safe (Red Hat package) - update to 0.3.6-1.el7rhgs
prometheus-formula - update to 0.7.0-150300.3.17.2
grafana-formula - update to 0.8.1-150300.3.9.2
salt-netapi-client - addressed in versions 0.20.0-150300.3.9.4, 0.21.0-150300.3.12.4
subscription-matcher - update to 0.29-150300.6.12.2
rubygem-mustermann (Red Hat package) - update to 1.0.3-1.el7rhgs
virtual-host-gatherer - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-libcloud - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-Kubernetes - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-VMware - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-Nutanix - update to 1.0.24-150300.3.9.2
rubygem-concurrent-ruby (Red Hat package) - update to 1.1.9-1.el7rhgs
ansible-collection-ansible-posix (Red Hat package) - update to 1.2.0-1.3.el9ost
rubygem-tzinfo (Red Hat package) - update to 1.2.10-1.el7rhgs
Storage Defender – Data Protect - update to 1.3.0
IBM i Modernization Engine for Lifecycle Integration - update to 1.4.7
Netcool Operations Insight - update to 1.6.7
smdba - update to 1.7.11-0.150300.3.12.2
Data Virtualization (DV) on Cloud Pak for Data (CPD) - update to 1.8.0
rubygem-i18n (Red Hat package) - update to 1.9.1-1.el7rhgs
Cloud Pak for Security (CP4S) - update to 1.10.12.0
python-django (Red Hat package) - update to 1.11.27-4.el7rhgs
Spectrum Discover - addressed in versions 2.0.4.8, 2.1.1
rubygem-tilt (Red Hat package) - update to 2.0.11-1.el7rhgs
IBM Planning Analytics Workspace - update to 2.0.81
rubygem-rack-protection (Red Hat package) - update to 2.2.0-1.el7rhgs
rubygem-sinatra (Red Hat package) - update to 2.2.0-1.el7rhgs
rubygem-rack (Red Hat package) - update to 2.2.4-1.el7rhgs
Storage Copy Data Management - update to 2.2.26.0
Red Hat Integration - Service Registry - update to 2.3.0
rubygem-nio4r (Red Hat package) - update to 2.3.1-2.el7rhgs
IBM Cloud Pak System - update to 2.3.3.7 iFix 01
ruby (Red Hat package) - update to 2.4.9-94.el7rhgs
Red Hat OpenShift distributed tracing (RHOSDT) - update to 2.6.0
Qradar Advisor - update to 2.6.4
IBM Guardium Data Encryption (GDE) - update to 2.6.7
cephadm-ansible (Red Hat package) - update to 2.15.0-1.el9cp
libjs-moment (Ubuntu package) - addressed in versions 2.20.1+ds-1ubuntu0.1, 2.24.0+ds-2ubuntu0.1, 2.29.1+ds-3ubuntu0.2
node-moment (Ubuntu package) - addressed in versions 2.20.1+ds-1ubuntu0.1, 2.24.0+ds-2ubuntu0.1, 2.29.1+ds-3ubuntu0.2
IBM QRadar Data Synchronization App - update to 3.1.1
cobbler - update to 3.1.2-150300.5.19.1
rubygem-bcrypt (Red Hat package) - update to 3.1.12-2.el7rhgs
IBM Cloud Pak for Watson AIOps - update to 3.4.2
subscription-manager-cockpit - addressed in versions 4-1.fc36, 4-1.fc37
httpcomponents-asyncclient - update to 4.1.4-150300.3.3.2
QRadar User Behavior Analytics - update to 4.1.11
susemanager-tftpsync-recv - addressed in versions 4.2.5-150300.3.6.2, 4.3.7-150400.3.3.3
supportutils-plugin-susemanager - update to 4.2.5-150300.3.9.2
python3-uyuni-common-libs - addressed in versions 4.2.7-150300.3.9.2, 4.2.9-150300.3.14.1, 4.3.6-150400.3.6.4
python3-rhnlib - update to 4.2.7-150300.4.12.2
spacewalk-search - addressed in versions 4.2.8-150300.3.12.2, 4.2.9-150300.3.15.2
mgr-osad - update to 4.2.9-150300.2.12.2
python3-mgr-osa-common - update to 4.2.9-150300.2.12.2
python3-mgr-osad - update to 4.2.9-150300.2.12.2
mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
python3-mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
release-notes-susemanager-proxy - addressed in versions 4.2.9-150300.3.43.1, 4.3.2-150400.3.9.3
release-notes-susemanager - addressed in versions 4.2.9-150300.3.54.1, 4.3.2-150400.3.15.1
mgr-daemon - addressed in versions 4.2.10-150300.2.9.4, 4.3.6-150400.3.6.4
spacewalk-proxy-installer - update to 4.2.11-150300.3.14.2
spacewalk-admin - addressed in versions 4.2.12-150300.3.15.3, 4.2.13-150300.3.18.1
spacewalk-proxy-broker - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
spacewalk-proxy-common - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
spacewalk-proxy-salt - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
spacewalk-proxy-redirect - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
spacewalk-proxy-management - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
spacewalk-proxy-package-manager - addressed in versions 4.2.12-150300.3.21.3, 4.2.13-150300.3.24.2
python3-spacewalk-certs-tools - addressed in versions 4.2.18-150300.3.24.3, 4.2.19-150300.3.27.4, 4.3.15-150400.3.6.2
spacewalk-certs-tools - addressed in versions 4.2.18-150300.3.24.3, 4.2.19-150300.3.27.4, 4.3.15-150400.3.6.2
spacecmd - addressed in versions 4.2.19-150300.4.27.2, 4.2.21-150300.4.33.2, 4.3.15-150400.3.6.4
python3-spacewalk-check - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
spacewalk-client-tools - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
spacewalk-client-setup - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
python3-spacewalk-client-tools - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
python3-spacewalk-client-setup - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
spacewalk-check - addressed in versions 4.2.20-150300.4.24.3, 4.2.22-150300.4.30.2, 4.3.12-150400.3.6.6
susemanager-schema - addressed in versions 4.2.24-150300.3.27.3, 4.2.27-150300.3.35.1
spacewalk-backend-iss - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-sql - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-sql-postgresql - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-xmlrpc - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6, 4.3.16-150400.3.6.8
spacewalk-backend-server - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-package-push-server - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-iss-export - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-config-files-tool - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-tools - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-xml-export-libs - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-config-files-common - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-config-files - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-applet - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
spacewalk-backend-app - addressed in versions 4.2.24-150300.4.29.5, 4.2.26-150300.4.35.6
susemanager-sls - addressed in versions 4.2.27-150300.3.33.4, 4.2.31-150300.3.43.1
uyuni-config-modules - addressed in versions 4.2.27-150300.3.33.4, 4.2.31-150300.3.43.1
spacewalk-base-minimal-config - addressed in versions 4.2.29-150300.3.27.3, 4.2.32-150300.3.36.4, 4.3.24-150400.3.6.4
spacewalk-base-minimal - addressed in versions 4.2.29-150300.3.27.3, 4.2.32-150300.3.36.4, 4.3.24-150400.3.6.4
spacewalk-html - addressed in versions 4.2.29-150300.3.27.3, 4.2.32-150300.3.36.4
spacewalk-base - addressed in versions 4.2.29-150300.3.27.3, 4.2.32-150300.3.36.4
susemanager-tools - addressed in versions 4.2.37-150300.3.41.1, 4.2.40-150300.3.49.1
susemanager - addressed in versions 4.2.37-150300.3.41.1, 4.2.40-150300.3.49.1
spacewalk-taskomatic - addressed in versions 4.2.41-150300.3.43.5, 4.2.47-150300.3.58.1
spacewalk-java - addressed in versions 4.2.41-150300.3.43.5, 4.2.47-150300.3.58.1
spacewalk-java-postgresql - addressed in versions 4.2.41-150300.3.43.5, 4.2.47-150300.3.58.1
spacewalk-java-lib - addressed in versions 4.2.41-150300.3.43.5, 4.2.47-150300.3.58.1
spacewalk-java-config - addressed in versions 4.2.41-150300.3.43.5, 4.2.47-150300.3.58.1
patterns-suma_server - update to 4.2-150300.4.12.2
patterns-suma_retail - update to 4.2-150300.4.12.2
patterns-suma_proxy - update to 4.2-150300.4.12.2
susemanager-docs_en - addressed in versions 4.2-150300.12.33.2, 4.2-150300.12.39.2
susemanager-docs_en-pdf - addressed in versions 4.2-150300.12.33.2, 4.2-150300.12.39.2
susemanager-doc-indexes - addressed in versions 4.2-150300.12.33.4, 4.2-150300.12.39.4
rubygem-puma (Red Hat package) - update to 4.3.12-1.el7rhgs
woodstox - update to 4.4.2-150300.3.6.2
IBM TRIRIGA Application Platform - update to 4.5
ovirt-host (Red Hat package) - update to 4.5.0-3.1.el8ev
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.6.2
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.0, 4.13.0
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.1.1
IBM Storage Scale System - addressed in versions 5.2.0.0, 6.1.9.2
rubygem-activesupport (Red Hat package) - update to 5.2.0-1.el7rhgs
rubygem-activemodel (Red Hat package) - update to 5.2.0-1.el7rhgs
grafana (Red Hat package) - update to 5.2.4-6.el7rhgs
unboundid-ldapsdk (Red Hat package) - update to 6.0.4-1.el8ev
Red Hat Ceph Storage - update to 6.1
python-notebook - addressed in versions 6.4.0-4.fc35, 6.4.11-3.fc36, 6.4.11-3.fc37, 7.0.0-1.fc39
Engineering Lifecycle Management - addressed in versions 7.0.1 iFix020, 7.0.2 iFix020
Jazz Reporting Service - update to 7.0.2 iFix021
IBM Maximo Asset Management - addressed in versions 7.6.1.2.0.26, 7.6.1.3.0.1, 8.1.10, 9.0.6
drools - addressed in versions 7.17.0-150300.4.6.2, 7.17.0-150300.4.9.2
IBM Spectrum Protect for Space Management - update to 8.1.17.2
IBM Spectrum Protect Backup-Archive Client - update to 8.1.17.2
IBM Maximo Application Suite - update to 8.4.3
Bitbucket Data Center - update to 8.19.25
Bitbucket Server - update to 8.19.25
IBM Spectrum Protect Plus - update to 10.1.14
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 7, 11.2.4.1 IF1
susemanager-build-keys - addressed in versions 15.3.6-150300.3.6.2, 15.4.3-150400.3.6.1
susemanager-build-keys-web - addressed in versions 15.3.6-150300.3.6.2, 15.4.3-150400.3.6.1
Ceph - update to 17.2.6-70.el9cp
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso
py27-compat-salt - addressed in versions 3000.3-150300.7.7.23.2, 3000.3-150300.7.7.29.2

External References

Related Security Bulletins