Resource exhaustion in envoy - CVE-2023-44487

 

Resource exhaustion in envoy - CVE-2023-44487

Published: October 10, 2023 / Updated: December 6, 2024


Vulnerability identifier: #VU81728
CSH Severity: High
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-44487
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improperly control of consumption for internal resources when handling HTTP/2 requests with compressed HEADERS frames. A remote attacker can send a sequence of compressed HEADERS frames followed by RST_STREAM frames and perform a denial of service (DoS) attack, a.k.a. "Rapid Reset".

Note, the vulnerability is being actively exploited in the wild.


Affected software

envoy
QRadar Suite
Juniper Secure Analytics (JSA)
Splunk Enterprise
EMC Integrated Data Protection Appliance
Dell EMC NetWorker vProxy
SUSE Linux Enterprise Server 15 SP4
Debian Linux
Oracle Linux
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Workstation Extension 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Fedora
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
FortiOS
SUSE Enterprise Storage
IBM i
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Microsoft Windows
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Development Tools Module
Public Cloud Module
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
Containers Module
SUSE Package Hub 15
Python 3 Module
Server Applications Module
openSUSE Leap
Ubuntu
openEuler
Junos OS
Windows Server
EcoStruxure Power Operation
Dell EMC Storage Monitoring and Reporting (SMR)
Service Interconnect
Migration Toolkit for Runtimes
Custom Metrics Autoscaler Operator for Red Hat OpenShift
IBM Cloud Pak for Data Scheduling
Machine Deletion Remediation Operator
Fence Agents Remediation Operator
Red Hat OpenShift Builds
Run Once Duration Override Operator for Red Hat OpenShift
Ingress-NGINX Controller for Kubernetes
Data Lakehouse
Consul Enterprise
Red Hat OpenShift Kernel Module Management
Service Binding Operator
Service Telemetry Framework
Red Hat Integration Camel-K
OpenShift Pipelines
cert-manager Operator for Red Hat OpenShift
Consul
Cilium
IBM Cloud Transformation Advisor
Oracle Communications Converged Charging System
Cryostat
Traefik
Ansible Automation Platform
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Oracle Banking Party Management
Red Hat OpenShift distributed tracing (RHOSDT)
IBM SPSS Analytic Server
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Discovery for IBM Cloud Pak for Data
EasyApache
Jira Service Management Data Center
Jira Service Management Server
Crowd Data Center
IBM Intelligent Operations Center
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat Satellite
Confluence Data Center
Jira Software Data Center
Bamboo Server
IBM Maximo Application Suite - Manage Component
IBM Common Licensing
IBM Transformation Extender Advanced
Oracle Communications Diameter Signaling Router
IBM Integration Bus
Oracle Communications Performance Intelligence Center (PIC) Software
Enterprise Manager Base Platform
Red Hat OpenStack
Oracle Blockchain Platform
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Network Repository Function
Oracle Communications Cloud Native Core Binding Support Function
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Netcool Operations Insight
DataPower Operator
IBM Process Mining
IBM MQ Operator
Red Hat Integration - Service Registry
IBM Fusion HCI
Red Hat build of Quarkus
Red Hat Integration Camel Extensions for Quarkus
IBM MaaS360 Cloud Extender Agent
IBM MaaS360 Mobile Enterprise Gateway
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Match 360
IBM Watson Knowledge Catalog in Cloud Pak for Data
Kube Descheduler Operator for Red Hat OpenShift
IBM Watson Assistant for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Spectrum Control
IBM Sterling Connect:Direct for UNIX
IBM Sterling Secure Proxy
IBM Sterling Connect:Direct Web Services
IBM Spectrum Scale for IBM Elastic Storage Server
IBM Global High Availability Mailbox
UCD - IBM UrbanCode Deploy
IBM Tivoli Netcool Impact
IBM Maximo Asset Management
Bitbucket Data Center
IBM Cloud Application Performance Management (APM)
IBM TXSeries for Multiplatforms
IBM Maximo Application Suite
Red Hat Build of OptaPlanner for Quarkus
IBM MQ
IBM Security Verify Governance
IBM Power Hardware Management Console (HMC)
Rational Service Tester
Rational Functional Tester (RFT)
Ceph
EMC Data Protection Advisor
IBM Cloud Pak for Business Automation
IBM Business Automation Workflow
Juniper Cloud Native Router
IBM Observability with Instana
RUGGEDCOM APE1808
FortiProxy
Dell EMC VxRail Appliance
Cognos Dashboards on Cloud Pak for Data
h2o
Event Processing
IBM i Modernization Engine for Lifecycle Integration
PowerVM NovaLink
Oracle Utilities Network Management System
Oracle Banking Platform
Dell EMC PowerProtect Data Protection
DB2 Data Management Console
Guardium Data Security Center (GDSC)
DataStage on Cloud Pak for Data
Storage Fusion Data Foundation
.NET
IBM Business Automation Manager Open Editions
IBM OpenPages with Watson
IBM Engineering Requirements Management DOORS Next
IBM Security Verify Bridge for Directory Sync
Rational Performance Tester
CICS Transaction Gateway for Multiplatforms
CICS Transaction Gateway Desktop Edition
SmartFabric OS10
webMethods Managed File Transfer
IBM Event Endpoint Management
webMethods developer portal
Oracle Communications Network Charging and Control
Oracle FLEXCUBE Private Banking
Oracle Data Integrator
Oracle Siebel CRM
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
IBM Application Suite - IBM Asset Data Dictionary Component
ObjectScale
APEX Cloud Platform for Microsoft Azure
Cloud Kubernetes Service
Installation Manager
Packaging Utility
Storage Defender - Resiliency Service
IBM Planning Analytics Workspace
Cloud Pak for Network Automation
Enterprise SONiC
Storage Resource Manager
User Entity Behavior Analytics
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
IBM Sterling Connect:Direct for Microsoft Windows
IBM Secure External Authentication Server
Storage Ceph
Rational Synergy
Storage Protect Server
Storage Protect Operations Center
Storage Virtualize
Maximo Application Suite - IoT Component
IBM Virtualization Engine TS7700 3948-VED
Telco Service Activator
IBM Netezza for Cloud Pak for Data
EMC Cloud Tiering Appliance
Robotic Process Automation for Cloud Pak
Cost Management
IBM Integrated Analytics System
Istio
Sterling Connect:Direct Browser User Interface
Red Hat OpenShift GitOps
Loki
Rational Change
Cloudera Data Platform Private Cloud Base for IBM
IBM Tivoli Application Dependency Discovery Manager
Oracle Managed File Transfer
Oracle Banking Origination
Oracle Banking Cash Management
Oracle Banking Virtual Account Management
Oracle Banking Branch
Oracle Banking Liquidity Management
IBM Data Risk Manager
Routing Release
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
Node Maintenance Operator
OpenShift Container Platform for Windows Containers
OpenShift Data Foundation (formerly OpenShift Container Storage)
Boundary
Crowd Server
Red Hat Single Sign-On
nghttp2
Netty
OpenShift API for Data Protection (OADP)
Vault Enterprise
Vault
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Network Observability plugin for the Openshift Console
Hestia Control Panel
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
MySQL Cluster
HPE Unified OSS Console (UOC)
Voice Gateway
Communications Service Catalog and Design
Oracle Communications Instant Messaging Server
Migration Toolkit for Containers
OpenShift Serverless Client
Red Hat OpenShift Container Platform
IBM Edge Application Manager
Oracle Autovue for Agile Product Lifecycle Management
IBM Disconnected Log Collector
IBM Cloud Pak for Multicloud Management
IBM DataPower Gateway
grpc
Wildfly
Kiali
Cloud Pak for Data
JBoss Data Grid
IBM Qradar SIEM
Jira Software Server
IBM Cognos Controller
IBM Cognos Command Center
Event Streams
AMQ Streams
JBoss Core Services
JBoss Enterprise Application Platform
AMQ Broker
Fuse
Oracle Coherence
Oracle WebLogic Server
IBM WebSphere Application Server Liberty
JBoss Enterprise Application Platform expansion pack (EAP XP)
Bitbucket Server
watsonx.data
Intel In-Band Manageability
Oracle Communications Session Border Controller
OpenView Performance Manager (OVPM)
IBM Security Verify Access
Red Hat Camel for Spring Boot
Oracle Agile PLM Framework
IBM App Connect Enterprise
IBM CICS TX Standard
Visual Studio
Oracle GraalVM for JDK
Red Hat support for Spring Boot
ASP.NET Core
IBM CICS TX Advanced
JBoss Web Server
Confluence Server
Apache Tomcat
Jetty
Microsoft Internet Information Services (IIS)
Node.js
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libtomcat8-embed-java (Ubuntu package)
nodejs (Ubuntu package)
libnode64 (Ubuntu package)
nodejs-dev (Ubuntu package)
h2o (Ubuntu package)
libh2o0.13 (Ubuntu package)
libnode72 (Ubuntu package)
libnode-dev (Ubuntu package)
trafficserver-dev (Ubuntu package)
trafficserver (Ubuntu package)
tomcat8 (Ubuntu package)
libtomcat8-java (Ubuntu package)
tomcat9-common (Ubuntu package)
haproxy (Ubuntu package)
libnghttp2-14 (Ubuntu package)
nghttp2 (Ubuntu package)
nghttp2-client (Ubuntu package)
nghttp2-proxy (Ubuntu package)
nghttp2-server (Ubuntu package)
eap7-jboss-jsp (Red Hat package)
Tomcat
crun-wasm (Red Hat package)
yggdrasil-worker-forwarder (Red Hat package)
toolbox (Red Hat package)
foreman_ygg_worker (Red Hat package)
rhc (Red Hat package)
yggdrasil (Red Hat package)
rust-bootupd (Red Hat package)
opencensus-proto-source
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
rhc-worker-script (Red Hat package)
wasmedge (Red Hat package)
varnish-modules
golang-github-prometheus-promu (Red Hat package)
coreos-installer (Red Hat package)
butane (Red Hat package)
qpid-proton (Red Hat package)
mcrouter
jbcs-httpd24-openssl-chil (Red Hat package)
containernetworking-plugins (Red Hat package)
collectd-libpod-stats (Red Hat package)
eap7-yasson (Red Hat package)
skopeo
containers-common
skopeo-debuginfo
skopeo-debugsource
kubevirt-virt-exportserver
kubevirt-virt-launcher-debuginfo
kubevirt-virt-api
kubevirt-virt-launcher
kubevirt-virt-exportproxy
kubevirt-virtctl
kubevirt-container-disk-debuginfo
kubevirt-virt-api-debuginfo
kubevirt-tests
kubevirt-virt-operator
kubevirt-virtctl-debuginfo
obs-service-kubevirt_containers_meta
kubevirt-tests-debuginfo
kubevirt-manifests
kubevirt-virt-operator-debuginfo
kubevirt-container-disk
kubevirt-virt-handler
kubevirt-pr-helper-conf
kubevirt-virt-exportproxy-debuginfo
kubevirt-virt-handler-debuginfo
kubevirt-virt-controller
kubevirt-virt-exportserver-debuginfo
kubevirt-virt-controller-debuginfo
runc (Red Hat package)
eap7-wildfly-transaction-client (Red Hat package)
rubygem-foreman_maintain (Red Hat package)
python-octavia-tests-tempest (Red Hat package)
pulpcore-selinux (Red Hat package)
tfm-rubygem-safemode (Red Hat package)
rubygem-safemode (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
python311-abseil
receptor (Red Hat package)
skupper-cli (Red Hat package)
skuba-update
skuba
jbcs-httpd24-apr-util (Red Hat package)
httpd24-nghttp2 (Red Hat package)
tfm-rubygem-rchardet (Red Hat package)
rubygem-rchardet (Red Hat package)
google-benchmark (Red Hat package)
openshift-gitops-kam (Red Hat package)
delve
crun (Red Hat package)
openshift-serverless-clients (Red Hat package)
eap7-jboss-server-migration (Red Hat package)
openshift-pipelines-client (Red Hat package)
skopeo (Red Hat package)
eap7-avro (Red Hat package)
spdlog (Red Hat package)
gtest (Red Hat package)
mod_http2
app-admin/consul
jbcs-httpd24-mod_http2 (Red Hat package)
tfm-rubygem-git (Red Hat package)
rubygem-git (Red Hat package)
nginx
go-toolset
golang
go-toolset-1.19 (Red Hat package)
go-toolset (Red Hat package)
golang (Red Hat package)
golang-tests
golang-src
golang-misc
golang-docs
golang-race
golang-bin
go-toolset-1.19-golang (Red Hat package)
rh-nginx120-nginx (Red Hat package)
nginx-mod-http-image-filter
nginx-mod-devel
nginx-mod-mail
nginx-filesystem
nginx-mod-http-perl
nginx-mod-http-xslt-filter
nginx-all-modules
nginx-mod-stream
nginx (Red Hat package)
golang-1.20 (Ubuntu package)
golang-1.20-go (Ubuntu package)
golang-1.20-src (Ubuntu package)
dev-lang/go
golang-shared
go1.20
go1.20-debuginfo
go1.20-doc
go1.20-race
go1.20-openssl-race
go1.20-openssl-doc
go1.20-openssl-debuginfo
go1.20-openssl
golang-1.21-go (Ubuntu package)
golang-1.21 (Ubuntu package)
golang-1.21-src (Ubuntu package)
go1.21-doc
go1.21-race
go1.21
go1.21-openssl-doc
go1.21-openssl-race
go1.21-openssl
nginx-help
nginx-debuginfo
nginx-debugsource
nginx-source
kubernetes1.24-controller-manager
kubernetes1.24-kubelet-common
kubernetes1.24-proxy
kubernetes1.24-apiserver
kubernetes1.24-client
kubernetes1.24-kubeadm
kubernetes1.24-kubelet
kubernetes1.24-client-bash-completion
kubernetes1.24-scheduler
kubernetes1.24-client-common
kubernetes1.24-client-fish-completion
cri-o (Red Hat package)
kubernetes1.25-kubeadm
kubernetes1.25-client
kubernetes1.25-client-common
kubernetes1.25-client-fish-completion
kubernetes1.25-proxy
kubernetes1.25-client-bash-completion
kubernetes1.25-scheduler
kubernetes1.25-controller-manager
kubernetes1.25-kubelet
kubernetes1.25-kubelet-common
kubernetes1.25-apiserver
cri-tools (Red Hat package)
buildah (Red Hat package)
wdt
nghttp2
nghttp2 (Red Hat package)
libnghttp2-devel
libnghttp2
libnghttp2-devel-doc
containers-common (Red Hat package)
libnghttp2-14-debuginfo-32bit
nghttp2-debugsource
nghttp2-debuginfo
libnghttp2-14
libnghttp2-14-debuginfo
libnghttp2-14-32bit
libnghttp2_asio1-debuginfo
libnghttp2-14-32bit-debuginfo
libnghttp2_asio-devel
libnghttp2_asio1
nghttp2-python-debugsource
python3-nghttp2
python3-nghttp2-debuginfo
libnghttp2_asio1-32bit
libnghttp2_asio1-32bit-debuginfo
nghttp2-help
nghttp2 (Debian package)
jbcs-httpd24-nghttp2 (Red Hat package)
nghttp2-doc
grpc
libupb37-debuginfo
libgrpc37
grpc-source
grpc-devel-debuginfo
libgrpc37-debuginfo
grpc-debugsource
libgrpc1_60
libupb37
grpc-devel
upb-devel
libgrpc++1_60-debuginfo
libgrpc++1_60
grpc-debuginfo
libgrpc1_60-debuginfo
python-grpcio-debugsource
python311-grpcio
python311-grpcio-debuginfo
net-libs/nghttp2
python-werkzeug (Red Hat package)
mod_md
eap7-jboss-marshalling (Red Hat package)
mod_http2 (Red Hat package)
netty-tcnative
netty-tcnative-javadoc
conmon (Red Hat package)
nmstate (Red Hat package)
eap7-undertow (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
skupper-router (Red Hat package)
eap7-jandex (Red Hat package)
mod_session
httpd
mod_ssl
httpd-devel
httpd-tools
httpd-filesystem
httpd-manual
mod_ldap
mod_proxy_html
httpd-debugsource
httpd-help
httpd-debuginfo
jbcs-httpd24-httpd (Red Hat package)
mod_lua
httpd-doc
httpd-core
www-servers/apache
haproxy (Red Hat package)
eap7-apache-sshd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
eap7-activemq-artemis (Red Hat package)
ignition (Red Hat package)
container-selinux (Red Hat package)
jenkins (Red Hat package)
nodejs-nodemon
kata-containers (Red Hat package)
foreman (Red Hat package)
eap7-weld-core (Red Hat package)
python-gitpython (Red Hat package)
python-django (Red Hat package)
catch (Red Hat package)
eap7-hal-console (Red Hat package)
etcd (Red Hat package)
etcd
foreman-installer (Red Hat package)
eap7-jboss-xnio-base (Red Hat package)
python-pulpcore (Red Hat package)
netty (Debian package)
libnetty-java (Ubuntu package)
eap7-netty (Red Hat package)
eap7-netty-transport-native-epoll (Red Hat package)
netty-poms
netty-javadoc
netty
caasp-release
eap7-jgroups (Red Hat package)
release-notes-caasp
podman (Red Hat package)
rubygem-katello (Red Hat package)
openshift-clients (Red Hat package)
openshift (Red Hat package)
openshift-ansible (Red Hat package)
jenkins-2-plugins (Red Hat package)
openshift-kuryr (Red Hat package)
openshift4-aws-iso (Red Hat package)
microshift (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python311-protobuf
eap7-hibernate (Red Hat package)
rust-afterburn (Red Hat package)
eap7-jbossws-cxf (Red Hat package)
rh-varnish6-varnish (Red Hat package)
varnish-docs
varnish
varnish-devel
dotnet-runtime-6.0
aspnetcore-runtime-6.0
aspnetcore-targeting-pack-6.0
dotnet-apphost-pack-6.0
dotnet-host
dotnet-hostfxr-6.0
dotnet-targeting-pack-6.0
ceph-ansible (Red Hat package)
dotnet6 (Ubuntu package)
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet6.0
rh-dotnet60-dotnet (Red Hat package)
dotnet6.0 (Red Hat package)
dotnet
netstandard-targeting-pack-2.1
dotnet-sdk-6.0
dotnet-sdk-6.0-source-built-artifacts
dotnet-templates-6.0
varnish (Red Hat package)
satellite (Red Hat package)
npm
rubygem-foreman_rh_cloud (Red Hat package)
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet7.0 (Red Hat package)
grafana (Red Hat package)
varnish-debuginfo
varnish-debugsource
varnish-help
eap7-wildfly (Red Hat package)
grafana
v8-devel
puppet-agent (Red Hat package)
dotnet-runtime-8.0 (Ubuntu package)
aspnetcore-runtime-8.0 (Ubuntu package)
dotnet-hostfxr-8.0 (Ubuntu package)
dotnet-host-8.0 (Ubuntu package)
dotnet-sdk-8.0 (Ubuntu package)
dotnet8 (Ubuntu package)
trafficserver (Debian package)
jbcs-httpd24-curl (Red Hat package)
tomcat8
tomcat9 (Debian package)
tomcat-webapps
tomcat-servlet-4.0-api
tomcat-lib
tomcat-jsp-2.3-api
tomcat-el-3.0-api
tomcat-docs-webapp
tomcat-admin-webapps
tomcat
tomcat (Red Hat package)
jws5-tomcat (Red Hat package)
tomcat9
tomcat-el-3_0-api
tomcat-servlet-4_0-api
tomcat-jsp-2_3-api
tomcat-jsvc
tomcat-help
fmt (Red Hat package)
trafficserver
jetty9 (Debian package)
jetty-minimal-javadoc
jetty-annotations
jetty-quickstart
jetty-continuation
jetty-deploy
jetty-jndi
jetty-proxy
jetty-webapp
jetty-fcgi
jetty-plus
jetty-openid
jetty-jsp
jetty-jmx
jetty-client
jetty-jaas
jetty-server
jetty-http-spi
jetty-util
jetty-http
jetty-servlet
jetty-security
jetty-io
jetty-util-ajax
jetty-cdi
jetty-servlets
jetty-xml
jetty-rewrite
jetty-ant
jetty-start
tomcat10 (Debian package)
npm10
nodejs10-debuginfo
nodejs10-debugsource
nodejs10-docs
nodejs10
nodejs10-devel
rubygem-foreman_theme_satellite (Red Hat package)
eap7-infinispan (Red Hat package)
nodejs-libs
nodejs
nodejs-debuginfo
nodejs-docs
nodejs-full-i18n
nodejs-devel
nodejs-debugsource
npm12
nodejs12-devel
nodejs12-debuginfo
nodejs12-debugsource
nodejs12-docs
nodejs12
rh-nodejs14-nodejs (Red Hat package)
nodejs14-debugsource
npm14
nodejs14-debuginfo
nodejs14
nodejs14-devel
nodejs14-docs
corepack14
nodejs (Red Hat package)
nodejs16-docs
npm16
nodejs16-debugsource
nodejs16-devel
nodejs16-debuginfo
nodejs16
corepack16
cachelib
nodejs18
nodejs18-docs
nodejs18-debugsource
npm18
nodejs18-debuginfo
nodejs18-devel
nodejs20
openstack-ironic (Red Hat package)
net-libs/nodejs
ovn23.09 (Red Hat package)
libprotoc25_1_0-32bit
libprotobuf-lite25_1_0-64bit
libprotobuf-lite25_1_0-32bit
libprotobuf-lite25_1_0-32bit-debuginfo
libprotobuf25_1_0-32bit-debuginfo
libprotoc25_1_0-32bit-debuginfo
libprotobuf25_1_0-32bit
libprotobuf-lite25_1_0-64bit-debuginfo
libprotoc25_1_0-64bit
libprotobuf25_1_0-64bit-debuginfo
libprotobuf25_1_0-64bit
libprotoc25_1_0-64bit-debuginfo
protobuf-devel-debuginfo
libprotobuf25_1_0-debuginfo
protobuf-debugsource
libprotobuf25_1_0
protobuf-java
libprotobuf-lite25_1_0
libprotobuf-lite25_1_0-debuginfo
libprotoc25_1_0-debuginfo
protobuf-devel
libprotoc25_1_0
nodejs-packaging
eap7-guava-libraries (Red Hat package)
watchman
nodejs-packaging-bundler
ostree (Red Hat package)
mvfst
wangle
proxygen
folly
fizz
fbthrift
fb303
rpm-ostree (Red Hat package)
libabsl2308_0_0-debuginfo
abseil-cpp-debugsource
libabsl2308_0_0-32bit-debuginfo
abseil-cpp-devel
libabsl2308_0_0-64bit-debuginfo
libabsl2308_0_0
libabsl2308_0_0-64bit
libabsl2308_0_0-32bit
libre2-11
libre2-11-32bit
re2-devel
re2-debugsource
libre2-11-32bit-debuginfo
libre2-11-64bit
libre2-11-64bit-debuginfo
libre2-11-debuginfo
PeopleSoft Enterprise PeopleTools
Planning Analytics Local
Operational Decision Manager
IBM Cognos Analytics
Oracle Commerce Guided Search
Oracle Retail EFTLink
Oracle Communications BRM - Elastic Charging Engine
IBM InfoSphere Information Server
Oracle Communications Pricing Design Center
Oracle Communications Convergent Charging Controller
Oracle Communications Cloud Native Core Network Slice Selection Function
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Unified Data Repository
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
IBM MaaS360 VPN Module
IBM Spectrum Scale
Red Hat Ceph Storage
IBM Storage Scale System
RecoverPoint for VMs
Virtualization Engine TS7700 3957-VED
Junos cRPD
IBM Security Guardium

How to mitigate CVE-2023-44487

Install updates from vendor's website.

envoy - addressed in versions 1.24.10, 1.25.10, 1.26.5, 1.27.1
EcoStruxure Power Operation - update to 2024 CU2
Migration Toolkit for Runtimes - update to 1.2.1
Custom Metrics Autoscaler Operator for Red Hat OpenShift - update to 2.12.1-376
Routing Release - update to 0.282.0
Boundary - update to 0.14.1
Machine Deletion Remediation Operator - update to 0.2.1
Fence Agents Remediation Operator - update to 0.2.1
Node Health Check Operator - addressed in versions 0.4.1, 0.6.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
Red Hat OpenShift Builds - update to 1.0.1
Run Once Duration Override Operator for Red Hat OpenShift - addressed in versions 1.0.1, 1.1.0
Event Processing - update to 1.0.5
nghttp2 - update to 1.57.0
IBM Integrated Analytics System - update to 1.0.31.0
IBM i Modernization Engine for Lifecycle Integration - update to 1.4.5
Ingress-NGINX Controller for Kubernetes - update to 1.9.5
Istio - addressed in versions 1.17.8, 1.18.5, 1.19.3
Data Lakehouse - update to 1.1.0.0
OpenShift API for Data Protection (OADP) - addressed in versions 1.0.14, 1.3.0
Consul Enterprise - addressed in versions 1.14.11, 1.15.7, 1.15.10, 1.16.3, 1.16.6, 1.17.1, 1.17.3
Vault Enterprise - addressed in versions 1.13.9, 1.14.5, 1.15.1
Vault - addressed in versions 1.13.9, 1.14.5, 1.15.1
Red Hat OpenShift Serverless - update to 1.30.2
Hestia Control Panel - update to 1.8.9
Voice Gateway - addressed in versions 1.0.8.9, 1.0.8.13
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - addressed in versions 1.1.3, 1.2.0
Red Hat OpenShift Kernel Module Management - update to 1.1.2
Service Binding Operator - update to 1.4.1
Network Observability plugin for the Openshift Console - update to 1.5.0
Sterling Connect:Direct Browser User Interface - update to 1.5.0.2 iFix-39
Service Telemetry Framework - update to 1.5.2
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.1, 1.8.2
Red Hat OpenShift GitOps - addressed in versions 1.9.3, 1.10.1
Red Hat Integration Camel-K - update to 1.10.4
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2, 1.12.1
QRadar Suite - update to 1.10.18.0
cert-manager Operator for Red Hat OpenShift - addressed in versions 1.11.5, 1.12.1
Consul - addressed in versions 1.14.11, 1.15.7, 1.16.3
Cilium - update to 1.14.3
OpenShift Serverless Client - update to 1.30.2
grpc - update to 1.59.2
Kiali - update to 1.65.10
IBM Cloud Transformation Advisor - addressed in versions 3.8.0, 3.10.2
Loki - update to 2.9.2
Traefik - update to 2.10.5
PowerVM NovaLink - addressed in versions 2.1.1-240119, 2.2.0-240119
Multicluster Engine for Kubernetes - addressed in versions 2.1.9, 2.2.9, 2.3.3, 2.6, 2.8.4
Ansible Automation Platform - update to 2.2.2
AMQ Streams - addressed in versions 2.2.2, 2.5.1, 2.5.2
OpenShift Service Mesh - addressed in versions 2.2.11, 2.2.12, 2.3.8, 2.4.4, 2.4.5, 2.4.8, 2.5.2
watsonx.data - update to 2.3.1
Migration Toolkit for Virtualization - addressed in versions 2.4.3, 2.5.2
JBoss Core Services - addressed in versions 2.4.57 SP1, 2.4.57 SP2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.8, 2.7.9, 2.8.3, 2.11.9
Intel In-Band Manageability - update to 4.2.0
Dell EMC PowerProtect Data Protection - update to 2.7.8
DB2 Data Management Console - update to 3.1.13
Guardium Data Security Center (GDSC) - update to 3.6.1
Red Hat Camel for Spring Boot - addressed in versions 3.20.3, 4.0.1
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.7, 3.74.8, 4.0.5, 4.1.4, 4.1.5, 4.2.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.0
EasyApache - addressed in versions 4 2023-10-12, 4 2023-10-18
Netty - update to 4.1.100
DataStage on Cloud Pak for Data - update to 5.0.0
Storage Fusion Data Foundation - update to 4.14
Red Hat OpenShift Container Platform - addressed in versions 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.11.57, 4.11.58, 4.11.59, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.49, 4.12.50, 4.12.51, 4.12.54, 4.12.71, 4.12.72, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.29, 4.13.31, 4.13.32, 4.13.33, 4.13.35, 4.13.36, 4.13.38, 4.13.54, 4.13.55, 4.14.0, 4.14.2, 4.14.4, 4.14.5, 4.14.6, 4.14.7, 4.14.8, 4.14.10, 4.14.11, 4.14.13, 4.14.14, 4.14.18, 4.14.21, 4.14.42, 4.15.0, 4.15.5, 4.15.9, 4.15.39
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.12.9, 4.13.5, 4.13.6, 4.14.0, 4.14.1
Jira Service Management Data Center - addressed in versions 4.20.28, 5.4.12
Jira Service Management Server - addressed in versions 4.20.28, 5.4.12
Cloud Pak for Data - update to 5.2
Crowd Server - addressed in versions 5.0.8, 5.1.6, 5.2.1, 6.2.3
Crowd Data Center - addressed in versions 5.0.8, 5.1.6, 5.2.1, 6.2.3
Node Maintenance Operator - addressed in versions 5.0.1, 5.2.1
Rational Change - update to 5.3.2.7
OpenShift Logging - addressed in versions 5.5.17, 5.6.12, 5.7.7, 5.8.1
JBoss Web Server - update to 5.7.5
.NET - addressed in versions 6.0.23, 7.0.12
OpenShift Container Platform for Windows Containers - addressed in versions 6.0.3, 7.2.0, 8.1.0, 9.0.0, 9.0.1, 10.15.0
Red Hat Migration Toolkit for Applications - addressed in versions 6.1.4, 6.2, 6.2.1
Red Hat Satellite - addressed in versions 6.11.5.6, 6.12.5.2, 6.13.5, 6.14
FortiOS - addressed in versions 7.0.14, 7.2.7, 7.4.2
Wildfly - update to 30.0.0
FortiProxy - addressed in versions 7.2.8, 7.4.2
Confluence Data Center - addressed in versions 7.19.16, 7.19.17, 8.3.4, 8.4.5, 8.5.3, 8.5.4, 8.6.1, 8.6.2, 8.7.1
Confluence Server - addressed in versions 7.19.16, 7.19.17, 8.3.4, 8.4.5, 8.5.3, 8.5.4, 8.6.1, 8.6.2
JBoss Data Grid - addressed in versions 7.3.11, 8.4.5
JBoss Enterprise Application Platform - update to 7.4.14
Juniper Secure Analytics (JSA) - addressed in versions 7.5.0 UP7 IF03, 7.5.0 UP9 IF02, 7.5.0 UP12 IF03
IBM Qradar SIEM - update to 7.5.0 Update Pack 7 IF03
Red Hat Single Sign-On - update to 7.6.6
AMQ Broker - addressed in versions 7.10.4, 7.11.3
Fuse - update to 7.12.1
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4 SP2
IBM Business Automation Manager Open Editions - update to 8.0.4 IF001
Jira Software Data Center - addressed in versions 8.20.28, 9.4.12, 9.4.13, 9.11.3
Jira Software Server - addressed in versions 8.20.28, 9.4.12, 9.4.13, 9.11.3
MySQL Cluster - update to 8.3.0
Bamboo Server - addressed in versions 9.2.7, 9.3.5
Apache Tomcat - addressed in versions 8.5.94, 9.0.81, 10.1.14, 11.0.0-M12
IBM Maximo Application Suite - Manage Component - addressed in versions 9.0.28, 9.1.20, 9.2.1
Splunk Enterprise - addressed in versions 9.1.6, 9.2.3, 9.3.1
Jetty - addressed in versions 9.4.53.v20231009, 10.0.17, 11.0.17, 12.0.2
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.8
Rational Performance Tester - update to 11.0.0
SmartFabric OS10 - addressed in versions 10.5.4.11, 10.5.6.1
IBM Event Endpoint Management - update to 11.0.5
IBM Cognos Controller - update to 11.0.1.0.3
IBM App Connect Enterprise - addressed in versions 11.0.0.23, 12.0.10.1
webMethods developer portal - update to 11.1.6
IBM CICS TX Standard - update to 11.1.0.0 ifix15
Oracle Communications BRM - Elastic Charging Engine - update to 12.0.0.8.0
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
Visual Studio - addressed in versions 17.2.20 17.2.34202.200, 17.4.12 17.4.34202.201, 17.6.8 17.6.34202.202, 17.7.5 17.7.34202.233
Node.js - addressed in versions 18.18.2, 20.8.1
IBM WebSphere Application Server Liberty - update to 23.0.0.12
Junos OS - addressed in versions 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1
Oracle Siebel CRM - update to 23.12
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-15, 2023.4.1-0
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-15
libtomcat8-embed-java (Ubuntu package) - update to Ubuntu Pro
nodejs (Ubuntu package) - update to Ubuntu Pro
libnode64 (Ubuntu package) - update to Ubuntu Pro
nodejs-dev (Ubuntu package) - update to Ubuntu Pro
h2o (Ubuntu package) - addressed in versions Ubuntu Pro, 2.2.5+dfsg2-3ubuntu0.1~esm1, 2.2.5+dfsg2-6.1ubuntu2+esm1
libh2o0.13 (Ubuntu package) - update to Ubuntu Pro
libnode72 (Ubuntu package) - update to Ubuntu Pro
libnode-dev (Ubuntu package) - update to Ubuntu Pro
trafficserver-dev (Ubuntu package) - update to Ubuntu Pro
trafficserver (Ubuntu package) - update to Ubuntu Pro
tomcat8 (Ubuntu package) - update to Ubuntu Pro
libtomcat8-java (Ubuntu package) - update to Ubuntu Pro
tomcat9-common (Ubuntu package) - addressed in versions Ubuntu Pro, 9.0.31-1ubuntu0.9, 9.0.58-1ubuntu0.2
haproxy (Ubuntu package) - update to Ubuntu Pro
libnghttp2-14 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.2, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.1, 1.43.0-1ubuntu0.2, 1.52.0-1ubuntu0.1, 1.55.1-1ubuntu0.1, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.2, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.1, 1.43.0-1ubuntu0.2, 1.52.0-1ubuntu0.1, 1.55.1-1ubuntu0.1, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-client (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.2, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.1, 1.43.0-1ubuntu0.2, 1.52.0-1ubuntu0.1, 1.55.1-1ubuntu0.1, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-proxy (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.2, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.1, 1.43.0-1ubuntu0.2, 1.52.0-1ubuntu0.1, 1.55.1-1ubuntu0.1, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-server (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.2, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.1, 1.43.0-1ubuntu0.2, 1.52.0-1ubuntu0.1, 1.55.1-1ubuntu0.1, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
eap7-jboss-jsp (Red Hat package) - addressed in versions api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el7eap, api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el8eap, api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el9eap
OpenView Performance Manager (OVPM) - update to T0684V01^ABL
Tomcat - update to D.9.0.87.01
crun-wasm (Red Hat package) - addressed in versions 0.0-3.rhaos4.14.el8, 1.8.5-3.rhaos4.14.el9
yggdrasil-worker-forwarder (Red Hat package) - addressed in versions 0.0.3-1.el7sat, 0.0.3-1.el8sat
toolbox (Red Hat package) - addressed in versions 0.0.99.3-4.el9_0, 0.0.99.3-10.el9_2, 0.1.2-1.rhaos4.14.el9, 0.1.2-1.rhaos4.15.el9
foreman_ygg_worker (Red Hat package) - addressed in versions 0.2.2-1.el7sat, 0.2.2-1.el8sat, 0.2.2-1.el9sat
rhc (Red Hat package) - update to 0.2.2-1.el9_2.2
yggdrasil (Red Hat package) - addressed in versions 0.2.3-1.el7sat, 0.2.3-1.el8sat, 0.2.3-1.el9sat
rust-bootupd (Red Hat package) - update to 0.2.17-1.el9
opencensus-proto-source - update to 0.3.0+git.20200721-150400.9.3.1
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs
rhc-worker-script (Red Hat package) - update to 0.5-1.el7_9
wasmedge (Red Hat package) - update to 0.12.1-2.rhaos4.14.el9
varnish-modules - update to 0.15.0-6
golang-github-prometheus-promu (Red Hat package) - update to 0.15.0-15.1.gitd5383c5.el8
coreos-installer (Red Hat package) - addressed in versions 0.17.0-1.rhaos4.14.el8, 0.17.0-1.rhaos4.14.el9, 0.17.0-3.rhaos4.15.el9
butane (Red Hat package) - update to 0.19.0-1.1.rhaos4.14.el8
qpid-proton (Red Hat package) - addressed in versions 0.37.0-2.el8, 0.37.0-2.el9
mcrouter - addressed in versions 0.41.0.20231016-1.fc37, 0.41.0.20231016-1.fc38, 0.41.0.20231016-1.fc39, 0.41.0.20231016-1.fc40
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-19.el7jbcs, 1.0.0-19.el8jbcs
containernetworking-plugins (Red Hat package) - update to 1.0.1-11.1.rhaos4.14.el8
collectd-libpod-stats (Red Hat package) - addressed in versions 1.0.4-5.el8ost, 1.0.5-6.el8ost, 1.0.5-6.el9ost
eap7-yasson (Red Hat package) - addressed in versions 1.0.11-4.redhat_00002.1.el7eap, 1.0.11-4.redhat_00002.1.el8eap, 1.0.11-4.redhat_00002.1.el9eap
skopeo - addressed in versions 1.1.0-13, 1.8.0-7
containers-common - update to 1.1.0-13
skopeo-debuginfo - addressed in versions 1.1.0-13, 1.8.0-7
skopeo-debugsource - addressed in versions 1.1.0-13, 1.8.0-7
kubevirt-virt-exportserver - update to 1.1.0-150500.8.6.1
kubevirt-virt-launcher-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-virt-api - update to 1.1.0-150500.8.6.1
kubevirt-virt-launcher - update to 1.1.0-150500.8.6.1
kubevirt-virt-exportproxy - update to 1.1.0-150500.8.6.1
kubevirt-virtctl - update to 1.1.0-150500.8.6.1
kubevirt-container-disk-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-virt-api-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-tests - update to 1.1.0-150500.8.6.1
kubevirt-virt-operator - update to 1.1.0-150500.8.6.1
kubevirt-virtctl-debuginfo - update to 1.1.0-150500.8.6.1
obs-service-kubevirt_containers_meta - update to 1.1.0-150500.8.6.1
kubevirt-tests-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-manifests - update to 1.1.0-150500.8.6.1
kubevirt-virt-operator-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-container-disk - update to 1.1.0-150500.8.6.1
kubevirt-virt-handler - update to 1.1.0-150500.8.6.1
kubevirt-pr-helper-conf - update to 1.1.0-150500.8.6.1
kubevirt-virt-exportproxy-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-virt-handler-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-virt-controller - update to 1.1.0-150500.8.6.1
kubevirt-virt-exportserver-debuginfo - update to 1.1.0-150500.8.6.1
kubevirt-virt-controller-debuginfo - update to 1.1.0-150500.8.6.1
IBM Application Suite - IBM Asset Data Dictionary Component - update to 1.1.6
runc (Red Hat package) - addressed in versions 1.1.9-1.rhaos4.13.el8, 1.1.9-1.rhaos4.13.el9, 1.1.9-2.1.rhaos4.14.el8, 1.1.9-2.1.rhaos4.14.el9, 1.1.12-1.rhaos4.15.el9
eap7-wildfly-transaction-client (Red Hat package) - addressed in versions 1.1.16-1.Final_redhat_00001.1.el7eap, 1.1.16-1.Final_redhat_00001.1.el8eap, 1.1.16-1.Final_redhat_00001.1.el9eap
rubygem-foreman_maintain (Red Hat package) - update to 1.2.12-1.el8sat
python-octavia-tests-tempest (Red Hat package) - addressed in versions 1.3.0-1.20210528004838.0ae7f10.el8ost, 1.4.1-2.20230111145026.f7718ef.el8ost, 1.9.0-1.20230509101018.el9ost
pulpcore-selinux (Red Hat package) - update to 1.3.3-1.el8pc
tfm-rubygem-safemode (Red Hat package) - update to 1.3.8-0.1.el7sat
rubygem-safemode (Red Hat package) - addressed in versions 1.3.8-0.1.el8sat, 1.3.8-1.el8sat
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.19-6.el7jbcs, 1.3.19-6.el8jbcs, 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs
ObjectScale - update to 1.4.0
python311-abseil - update to 1.4.0-150400.9.3.1
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
receptor (Red Hat package) - addressed in versions 1.4.2-1.el8ap, 1.4.2-1.el9ap
skupper-cli (Red Hat package) - addressed in versions 1.4.3-4.el8, 1.4.3-4.el9
skuba-update - update to 1.4.17-150100.3.70.1
skuba - update to 1.4.17-150100.3.70.1
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-103.el7jbcs, 1.6.1-103.el8jbcs
Netcool Operations Insight - update to 1.6.12
httpd24-nghttp2 (Red Hat package) - update to 1.7.1-11.el7
tfm-rubygem-rchardet (Red Hat package) - update to 1.8.0-0.1.el7sat
rubygem-rchardet (Red Hat package) - update to 1.8.0-0.1.el8sat
DataPower Operator - update to 1.8.1
google-benchmark (Red Hat package) - update to 1.8.2-1.el9
Cloud Kubernetes Service - update to 1.8.4_5586_iks
IBM Disconnected Log Collector - update to 1.8.5
openshift-gitops-kam (Red Hat package) - addressed in versions 1.8.6-10.el8, 1.9.3-32.el8, 1.10.1-22.el8
delve - update to 1.9.1-1.0.1
crun (Red Hat package) - addressed in versions 1.9.2-1.rhaos4.13.el8, 1.9.2-1.rhaos4.13.el9, 1.9.2-1.rhaos4.14.el8, 1.9.2-1.rhaos4.14.el9, 1.14-1.rhaos4.15.el9
openshift-serverless-clients (Red Hat package) - update to 1.9.2-4.el8
eap7-jboss-server-migration (Red Hat package) - addressed in versions 1.10.0-33.Final_redhat_00032.1.el7eap, 1.10.0-33.Final_redhat_00032.1.el8eap, 1.10.0-33.Final_redhat_00032.1.el9eap
Installation Manager - update to 1.10.1.1
Packaging Utility - update to 1.10.1.1
openshift-pipelines-client (Red Hat package) - addressed in versions 1.10.6-11031.el8, 1.11.2-11148.el8, 1.12.1-11260.el8
skopeo (Red Hat package) - addressed in versions 1.11.2-10.1.rhaos4.14.el8, 1.11.2-10.1.rhaos4.14.el9, 1.11.2-21.1.rhaos4.15.el9
eap7-avro (Red Hat package) - addressed in versions 1.11.3-1.redhat_00001.1.el7eap, 1.11.3-1.redhat_00001.1.el8eap, 1.11.3-1.redhat_00001.1.el9eap
spdlog (Red Hat package) - update to 1.12.0-1.rhaos4.14.el9
gtest (Red Hat package) - update to 1.13.0-1.el9
IBM Process Mining - update to 1.14.3
mod_http2 - update to 1.15.7-10
app-admin/consul - update to 1.15.10
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-30.el7jbcs, 1.15.19-30.el8jbcs, 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs
tfm-rubygem-git (Red Hat package) - update to 1.18.0-0.1.el7sat
rubygem-git (Red Hat package) - addressed in versions 1.18.0-0.1.el8sat, 1.18.0-1.el8sat
nginx - addressed in versions 1.18.0-1.45, 1.24.0-1
go-toolset - update to 1.19.13-1
golang - addressed in versions 1.19.13-1.el7, 1.20.10-2.fc38, 1.20.10-3.fc37, 1.21.3-1.fc39
go-toolset-1.19 (Red Hat package) - update to 1.19.13-1.el7_9
go-toolset (Red Hat package) - update to 1.19.13-1.el9_2
golang (Red Hat package) - update to 1.19.13-1.el9_2
golang - addressed in versions 1.19.13-1.0.1, 1.20.10-1
golang-tests - addressed in versions 1.19.13-1.0.1, 1.20.10-1
golang-src - addressed in versions 1.19.13-1.0.1, 1.20.10-1
golang-misc - addressed in versions 1.19.13-1.0.1, 1.20.10-1
golang-docs - addressed in versions 1.19.13-1.0.1, 1.20.10-1
golang-race - update to 1.19.13-1.0.1
golang-bin - addressed in versions 1.19.13-1.0.1, 1.20.10-1
go-toolset-1.19-golang (Red Hat package) - update to 1.19.13-2.el7_9
rh-nginx120-nginx (Red Hat package) - update to 1.20.1-1.el7.1
nginx-mod-http-image-filter - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-mod-devel - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-mod-mail - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-filesystem - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-mod-http-perl - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-mod-http-xslt-filter - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-all-modules - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx-mod-stream - addressed in versions 1.20.1-1.0.3, 1.22.1-1.0.2
nginx (Red Hat package) - addressed in versions 1.20.1-10.el9_0.1, 1.20.1-14.el9_2.1
golang-1.20 (Ubuntu package) - addressed in versions 1.20.3-1ubuntu0.1~20.04.1, 1.20.3-1ubuntu0.1~22.04.1, 1.20.3-1ubuntu0.2, 1.20.8-1ubuntu0.23.10.1
golang-1.20-go (Ubuntu package) - addressed in versions 1.20.3-1ubuntu0.1~20.04.1, 1.20.3-1ubuntu0.1~22.04.1, 1.20.3-1ubuntu0.2, 1.20.8-1ubuntu0.23.10.1
golang-1.20-src (Ubuntu package) - addressed in versions 1.20.3-1ubuntu0.1~20.04.1, 1.20.3-1ubuntu0.1~22.04.1, 1.20.3-1ubuntu0.2, 1.20.8-1ubuntu0.23.10.1
dev-lang/go - update to 1.20.10
golang-shared - update to 1.20.10-1
golang - update to 1.20.10-1.48
go1.20 - update to 1.20.10-150000.1.29.1
go1.20-debuginfo - update to 1.20.10-150000.1.29.1
go1.20-doc - update to 1.20.10-150000.1.29.1
go1.20-race - update to 1.20.10-150000.1.29.1
go1.20-openssl-race - update to 1.20.11.1-150000.1.14.1
go1.20-openssl-doc - update to 1.20.11.1-150000.1.14.1
go1.20-openssl-debuginfo - update to 1.20.11.1-150000.1.14.1
go1.20-openssl - update to 1.20.11.1-150000.1.14.1
golang-1.21-go (Ubuntu package) - addressed in versions 1.21.1-1ubuntu0.23.10.1, 1.21.1-1~ubuntu20.04.2, 1.21.1-1~ubuntu22.04.2, 1.21.1-1~ubuntu23.04.2
golang-1.21 (Ubuntu package) - addressed in versions 1.21.1-1ubuntu0.23.10.1, 1.21.1-1~ubuntu20.04.2, 1.21.1-1~ubuntu22.04.2, 1.21.1-1~ubuntu23.04.2
golang-1.21-src (Ubuntu package) - addressed in versions 1.21.1-1ubuntu0.23.10.1, 1.21.1-1~ubuntu20.04.2, 1.21.1-1~ubuntu22.04.2, 1.21.1-1~ubuntu23.04.2
go1.21-doc - update to 1.21.3-150000.1.12.1
go1.21-race - update to 1.21.3-150000.1.12.1
go1.21 - update to 1.21.3-150000.1.12.1
go1.21-openssl-doc - update to 1.21.4.1-150000.1.5.1
go1.21-openssl-race - update to 1.21.4.1-150000.1.5.1
go1.21-openssl - update to 1.21.4.1-150000.1.5.1
nginx-mod-http-image-filter - update to 1.21.5-4
nginx-filesystem - update to 1.21.5-4
nginx-help - update to 1.21.5-4
nginx-all-modules - update to 1.21.5-4
nginx-mod-devel - update to 1.21.5-4
nginx-mod-stream - update to 1.21.5-4
nginx-mod-http-xslt-filter - update to 1.21.5-4
nginx-mod-mail - update to 1.21.5-4
nginx-mod-http-perl - update to 1.21.5-4
nginx-debuginfo - update to 1.21.5-4
nginx-debugsource - update to 1.21.5-4
nginx - update to 1.21.5-4
nginx - addressed in versions 1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1
nginx-debuginfo - addressed in versions 1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1
nginx-debugsource - addressed in versions 1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1
nginx-source - addressed in versions 1.21.5-150400.3.6.1, 1.21.5-150600.10.3.1
kubernetes1.24-controller-manager - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubelet-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-proxy - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-apiserver - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubeadm - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubelet - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-bash-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-scheduler - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-fish-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
cri-o (Red Hat package) - addressed in versions 1.25.5-2.rhaos4.12.git0217273.el8, 1.26.4-5.1.rhaos4.13.git969e013.el8, 1.26.4-5.1.rhaos4.13.git969e013.el9, 1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9, 1.27.1-13.1.rhaos4.14.git956c5f7.el8, 1.27.1-13.1.rhaos4.14.git956c5f7.el9, 1.28.3-14.rhaos4.15.git33aabd8.el9
kubernetes1.25-kubeadm - update to 1.25.16-150400.9.16.1
kubernetes1.25-client - update to 1.25.16-150400.9.16.1
kubernetes1.25-client-common - update to 1.25.16-150400.9.16.1
kubernetes1.25-client-fish-completion - update to 1.25.16-150400.9.16.1
kubernetes1.25-proxy - update to 1.25.16-150400.9.16.1
kubernetes1.25-client-bash-completion - update to 1.25.16-150400.9.16.1
kubernetes1.25-scheduler - update to 1.25.16-150400.9.16.1
kubernetes1.25-controller-manager - update to 1.25.16-150400.9.16.1
kubernetes1.25-kubelet - update to 1.25.16-150400.9.16.1
kubernetes1.25-kubelet-common - update to 1.25.16-150400.9.16.1
kubernetes1.25-apiserver - update to 1.25.16-150400.9.16.1
cri-tools (Red Hat package) - addressed in versions 1.27.0-2.1.el8, 1.27.0-2.1.el9, 1.28.0-3.el9
buildah (Red Hat package) - addressed in versions 1.29.1-10.1.rhaos4.14.el8, 1.29.1-10.1.rhaos4.14.el9, 1.29.1-20.2.rhaos4.15.el9
wdt - addressed in versions 1.32.1910230^20230711git3b52ef5-2.fc37, 1.32.1910230^20230711git3b52ef5-2.fc38, 1.32.1910230^20230711git3b52ef5-2.fc39, 1.32.1910230^20230711git3b52ef5-2.fc40
nghttp2 - addressed in versions 1.33.0-1.1.8, 1.57.0-1
nghttp2 - addressed in versions 1.33.0-1.2.el7, 1.51.0-2.fc37, 1.52.0-2.fc38, 1.55.1-4.fc39
nghttp2 (Red Hat package) - addressed in versions 1.33.0-3.el8_1.2, 1.33.0-3.el8_2.2, 1.33.0-4.el8_4.1, 1.33.0-4.el8_6.1, 1.33.0-5.el8_8, 1.43.0-5.el9_0.2, 1.43.0-5.el9_2.1, 1.43.0-5.el9_3.1
libnghttp2-devel - addressed in versions 1.33.0-4.0.1, 1.57.0-1
libnghttp2 - addressed in versions 1.33.0-4.0.1, 1.57.0-1
libnghttp2-devel-doc - update to 1.33.0-4.0.1
nghttp2 - addressed in versions 1.33.0-4.0.1, 1.57.0-1
containers-common (Red Hat package) - addressed in versions 1-36.rhaos4.12.el8, 1-36.rhaos4.13.el8, 1-36.rhaos4.13.el9, 1-51.rhaos4.14.el8
libnghttp2-14-debuginfo-32bit - update to 1.39.2-3.13.1
libnghttp2-devel - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
nghttp2-debugsource - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
nghttp2-debuginfo - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2-14 - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2-14-debuginfo - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2-14-32bit - addressed in versions 1.39.2-3.13.1, 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2_asio1-debuginfo - addressed in versions 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2-14-32bit-debuginfo - addressed in versions 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2_asio-devel - addressed in versions 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
libnghttp2_asio1 - addressed in versions 1.40.0-150000.3.17.1, 1.40.0-150200.12.1
nghttp2-python-debugsource - update to 1.40.0-150200.12.1
python3-nghttp2 - update to 1.40.0-150200.12.1
python3-nghttp2-debuginfo - update to 1.40.0-150200.12.1
nghttp2 - update to 1.40.0-150200.12.1
libnghttp2_asio1-32bit - update to 1.40.0-150200.12.1
libnghttp2_asio1-32bit-debuginfo - update to 1.40.0-150200.12.1
nghttp2 - update to 1.41.0-4
nghttp2-help - update to 1.41.0-4
nghttp2-debuginfo - update to 1.41.0-4
libnghttp2 - update to 1.41.0-4
nghttp2-debugsource - update to 1.41.0-4
libnghttp2-devel - update to 1.41.0-4
nghttp2 (Debian package) - addressed in versions 1.43.0-1+deb11u1, 1.52.0-1+deb12u1
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.43.0-12.el7jbcs, 1.43.0-12.el8jbcs
nghttp2 - update to 1.57.0
nghttp2-doc - update to 1.57.0-1
grpc - update to 1.60.0-10
libupb37-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc37 - update to 1.60.0-150400.8.3.2
grpc-source - update to 1.60.0-150400.8.3.2
grpc-devel-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc37-debuginfo - update to 1.60.0-150400.8.3.2
grpc-debugsource - update to 1.60.0-150400.8.3.2
libgrpc1_60 - update to 1.60.0-150400.8.3.2
libupb37 - update to 1.60.0-150400.8.3.2
grpc-devel - update to 1.60.0-150400.8.3.2
upb-devel - update to 1.60.0-150400.8.3.2
libgrpc++1_60-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc++1_60 - update to 1.60.0-150400.8.3.2
grpc-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc1_60-debuginfo - update to 1.60.0-150400.8.3.2
python-grpcio-debugsource - update to 1.60.0-150400.9.3.2
python311-grpcio - update to 1.60.0-150400.9.3.2
python311-grpcio-debuginfo - update to 1.60.0-150400.9.3.2
net-libs/nghttp2 - update to 1.61.0
python-werkzeug (Red Hat package) - update to 2.0.3-5.el9
IBM Data Risk Manager - update to 2.0.6.20
mod_md - update to 2.0.8-8
Storage Defender - Resiliency Service - update to 2.0.9
Planning Analytics Local - update to 2.0.9.20
eap7-jboss-marshalling (Red Hat package) - addressed in versions 2.0.14-1.SP1_redhat_00001.1.el7eap, 2.0.14-1.SP1_redhat_00001.1.el8eap, 2.0.14-1.SP1_redhat_00001.1.el9eap
IBM MQ Operator - addressed in versions 2.0.17, 3.0.0
mod_http2 - addressed in versions 2.0.25-1.fc37, 2.0.25-1.fc38, 2.0.25-1.fc39
mod_http2 (Red Hat package) - update to 2.0.26-1.el9
netty-tcnative - update to 2.0.62-150200.3.16.1
netty-tcnative-javadoc - update to 2.0.62-150200.3.16.1
IBM Planning Analytics Workspace - addressed in versions 2.0.94, 2.1.4
conmon (Red Hat package) - addressed in versions 2.1.7-1.2.rhaos4.14.el9, 2.1.7-3.1.rhaos4.14.el8, 2.1.7-3.1.rhaos4.14.el9
nmstate (Red Hat package) - update to 2.2.12-1.rhaos4.14.el8
eap7-undertow (Red Hat package) - addressed in versions 2.2.26-2.SP2_redhat_00001.1.el7eap, 2.2.26-2.SP2_redhat_00001.1.el8eap, 2.2.26-2.SP2_redhat_00001.1.el9eap, 2.2.28-1.SP1_redhat_00001.1.el7eap, 2.2.28-1.SP1_redhat_00001.1.el8eap, 2.2.28-1.SP1_redhat_00001.1.el9eap
IBM Cloud Pak for Multicloud Management - update to 2.3 FP11
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.0-27.el7jbcs, 2.4.0-27.el8jbcs, 2.4.24-2.el7jbcs, 2.4.24-2.el8jbcs
skupper-router (Red Hat package) - addressed in versions 2.4.3-1.el8, 2.4.3-1.el9
eap7-jandex (Red Hat package) - addressed in versions 2.4.4-1.Final_redhat_00001.1.el7eap, 2.4.4-1.Final_redhat_00001.1.el8eap, 2.4.4-1.Final_redhat_00001.1.el9eap
mod_session - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd - addressed in versions 2.4.37-64.0.1, 2.4.58-1
mod_ssl - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd-devel - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd-tools - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd-filesystem - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd-manual - addressed in versions 2.4.37-64.0.1, 2.4.58-1
mod_ldap - addressed in versions 2.4.37-64.0.1, 2.4.58-1
mod_proxy_html - addressed in versions 2.4.37-64.0.1, 2.4.58-1
httpd-tools - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
mod_md - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
mod_ldap - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
mod_proxy_html - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
mod_ssl - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd-debugsource - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
mod_session - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd-help - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd-filesystem - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd-debuginfo - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
httpd-devel - addressed in versions 2.4.43-23, 2.4.51-19, 2.4.51-20
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.57-6.el7jbcs, 2.4.57-6.el8jbcs, 2.4.57-7.el7jbcs, 2.4.57-7.el8jbcs
mod_lua - update to 2.4.58-1
httpd-doc - update to 2.4.58-1
httpd-core - update to 2.4.58-1
www-servers/apache - update to 2.4.68
Red Hat Integration - Service Registry - update to 2.5.4
Cloud Pak for Network Automation - update to 2.6.5
haproxy (Red Hat package) - update to 2.6.13-1.rhaos4.14.el8
EMC Integrated Data Protection Appliance - update to 2.7.6
Red Hat support for Spring Boot - update to 2.7.17
IBM Fusion HCI - update to 2.9.0
eap7-apache-sshd (Red Hat package) - addressed in versions 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-31.el7jbcs, 2.9.3-31.el8jbcs, 2.9.3-32.el7jbcs, 2.9.3-32.el8jbcs
Red Hat build of Quarkus - update to 2.13.8
Red Hat Integration Camel Extensions for Quarkus - update to 2.13.8.SP3
eap7-activemq-artemis (Red Hat package) - addressed in versions 2.16.0-17.redhat_00051.1.el7eap, 2.16.0-17.redhat_00051.1.el8eap, 2.16.0-17.redhat_00051.1.el9eap
ignition (Red Hat package) - addressed in versions 2.16.2-1.1.rhaos4.14.el9, 2.16.2-2.rhaos4.15.el9
container-selinux (Red Hat package) - addressed in versions 2.221.0-1.rhaos4.14.el8, 2.221.0-2.rhaos4.14.el9, 2.223.0-1.rhaos4.14.el8, 2.223.0-2.rhaos4.14.el9, 2.228.1-1.rhaos4.15.el9
jenkins (Red Hat package) - addressed in versions 2.414.3.1698292201-3.el8, 2.426.3.1706516352-3.el8
nodejs-nodemon - addressed in versions 3.0.1-1, 3.0.1-1.0.1
kata-containers (Red Hat package) - addressed in versions 3.0.2-9.rhaos4.12.el8, 3.1.3-4.rhaos4.14.el9
IBM MaaS360 Cloud Extender Agent - update to 3.000.300.025
IBM MaaS360 Mobile Enterprise Gateway - update to 3.000.400
IBM MaaS360 VPN Module - update to 3.000.400
HPE Unified OSS Console (UOC) - update to 3.1.0
foreman (Red Hat package) - addressed in versions 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat
eap7-weld-core (Red Hat package) - addressed in versions 3.1.10-2.Final_redhat_00001.1.el7eap, 3.1.10-2.Final_redhat_00001.1.el8eap, 3.1.10-2.Final_redhat_00001.1.el9eap
python-gitpython (Red Hat package) - update to 3.1.32-1.el8pc
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
python-django (Red Hat package) - update to 3.2.21-1.el8pc
catch (Red Hat package) - update to 3.3.2-1.el9
eap7-hal-console (Red Hat package) - addressed in versions 3.3.20-1.Final_redhat_00001.1.el7eap, 3.3.20-1.Final_redhat_00001.1.el8eap, 3.3.20-1.Final_redhat_00001.1.el9eap
etcd (Red Hat package) - addressed in versions 3.3.23-15.el8ost, 3.4.26-3.el9ost
etcd - addressed in versions 3.4.14-11, 3.4.14-12
foreman-installer (Red Hat package) - update to 3.5.2.4-1.el8sat
etcd - update to 3.5.13-1.fc41
eap7-jboss-xnio-base (Red Hat package) - addressed in versions 3.8.11-1.SP1_redhat_00001.1.el7eap, 3.8.11-1.SP1_redhat_00001.1.el8eap, 3.8.11-1.SP1_redhat_00001.1.el9eap
Red Hat OpenShift Dev Spaces - update to 3.15.0
python-pulpcore (Red Hat package) - update to 3.21.18-1.el8pc
netty (Debian package) - addressed in versions 1:4.1.48-4+deb11u2, 1:4.1.48-7+deb12u1
libnetty-java (Ubuntu package) - update to 1:4.1.48-4+deb11u2build0.22.04.1
eap7-netty (Red Hat package) - addressed in versions 4.1.94-2.Final_redhat_00003.1.el7eap, 4.1.94-2.Final_redhat_00003.1.el8eap, 4.1.94-2.Final_redhat_00003.1.el9eap
eap7-netty-transport-native-epoll (Red Hat package) - addressed in versions 4.1.94-2.Final_redhat_00003.1.el7eap, 4.1.94-2.Final_redhat_00003.1.el8eap, 4.1.94-2.Final_redhat_00003.1.el9eap
netty-poms - update to 4.1.100-150200.4.20.1
netty-javadoc - update to 4.1.100-150200.4.20.1
netty - update to 4.1.100-150200.4.20.1
Enterprise SONiC - update to 4.2.1
caasp-release - update to 4.2.10-150100.24.55.2
eap7-jgroups (Red Hat package) - addressed in versions 4.2.23-1.Final_redhat_00001.1.el7eap, 4.2.23-1.Final_redhat_00001.1.el8eap, 4.2.23-1.Final_redhat_00001.1.el9eap
release-notes-caasp - update to 4.2.20231122-150100.4.85.1
podman (Red Hat package) - addressed in versions 4.4.1-10.1.rhaos4.14.el8, 4.4.1-10.1.rhaos4.14.el9, 4.4.1-21.rhaos4.15.el9
rubygem-katello (Red Hat package) - update to 4.7.0.33-1.el8sat
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.2
IBM Match 360 - update to 4.8.3
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
Storage Resource Manager - update to 4.10.0.3
openshift-clients (Red Hat package) - addressed in versions 4.11.0-202310131344.p0.g3470d04.assembly.stream.el8, 4.12.0-202310131144.p0.g7aa4009.assembly.stream.el8, 4.12.0-202310131144.p0.g7aa4009.assembly.stream.el9, 4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8, 4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9, 4.13.0-202310130726.p0.g717d4a5.assembly.stream.el8, 4.13.0-202310130726.p0.g717d4a5.assembly.stream.el9, 4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el8, 4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el9, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el9, 4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el8, 4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el9, 4.15.0-202402070507.p0.g48dcf59.assembly.stream.el9
openshift (Red Hat package) - addressed in versions 4.11.0-202310140343.p0.gec2a592.assembly.stream.el8, 4.12.0-202310132326.p0.g20cda61.assembly.stream.el8, 4.12.0-202310132326.p0.g20cda61.assembly.stream.el9, 4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8, 4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9, 4.13.0-202310140746.p0.gc7606e7.assembly.stream.el8, 4.13.0-202310140746.p0.gc7606e7.assembly.stream.el9, 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el8, 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el9, 4.15.0-202402142009.p0.g6216ea1.assembly.stream.el9
openshift-ansible (Red Hat package) - addressed in versions 4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8, 4.13.0-202310130944.p0.g2d540c5.assembly.stream.el9, 4.14.0-202310062327.p0.gf781421.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el9, 4.15.0-202402162207.p0.g1c9b99e.assembly.stream.el9
jenkins-2-plugins (Red Hat package) - addressed in versions 4.13.1698292274-1.el8, 4.14.1706516441-1.el8
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.14.0
openshift-kuryr (Red Hat package) - update to 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - update to 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8
microshift (Red Hat package) - addressed in versions 4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9, 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - update to 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9
kernel (Red Hat package) - addressed in versions 4.18.0-372.76.1.el8_6, 4.18.0-372.82.1.el8_6, 5.14.0-284.36.1.el9_2, 5.14.0-284.40.1.el9_2, 5.14.0-284.41.1.el9_2, 5.14.0-284.54.1.el9_2
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.76.1.rt7.235.el8_6, 4.18.0-372.82.1.rt7.241.el8_6, 5.14.0-284.36.1.rt14.321.el9_2, 5.14.0-284.40.1.rt14.325.el9_2, 5.14.0-284.41.1.rt14.326.el9_2, 5.14.0-284.54.1.rt14.339.el9_2
python311-protobuf - update to 4.25.1-150400.9.3.1
Kube Descheduler Operator for Red Hat OpenShift - update to 5.0.0
IBM Watson Assistant for IBM Cloud Pak for Data - update to 5.0
User Entity Behavior Analytics - update to 5.0.2
App Connect Enterprise Certified Container - addressed in versions 5.0.17, 11.5.0
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.1.1
IBM Spectrum Scale - addressed in versions 5.1.2.15, 5.1.9.2
Red Hat Ceph Storage - addressed in versions 5.3, 6.1, 7.1
eap7-hibernate (Red Hat package) - addressed in versions 5.3.32-1.Final_redhat_00001.1.el7eap, 5.3.32-1.Final_redhat_00001.1.el8eap, 5.3.32-1.Final_redhat_00001.1.el9eap
rust-afterburn (Red Hat package) - addressed in versions 5.4.3-1.rhaos4.14.el9, 5.4.3-2.rhaos4.15.el9
eap7-jbossws-cxf (Red Hat package) - addressed in versions 5.4.9-1.Final_redhat_00001.1.el7eap, 5.4.9-1.Final_redhat_00001.1.el8eap, 5.4.9-1.Final_redhat_00001.1.el9eap
IBM Spectrum Control - update to 5.4.11
RecoverPoint for VMs - update to 6.0.SP1.P1
IBM Sterling Connect:Direct for UNIX - addressed in versions 6.0.0.2.159, 6.1.0.4.99, 6.2.0.7.5, 6.3.0.2.5
IBM Sterling Connect:Direct for Microsoft Windows - addressed in versions 6.0.0.4.83, 6.1.0.2.79, 6.2.0.6.7, 6.3.0.2.6
IBM Secure External Authentication Server - addressed in versions 6.0.3.0 iFix 10, 6.1.0.0 iFix 06
IBM Sterling Secure Proxy - addressed in versions 6.0.3 iFix 11, 6.1.0 iFix 03
rh-varnish6-varnish (Red Hat package) - update to 6.0.8-2.el7.3
varnish-docs - update to 6.0.8-3
varnish - update to 6.0.8-3
varnish-devel - update to 6.0.8-3
ASP.NET Core - addressed in versions 6.0.23, 7.0.12
dotnet-runtime-6.0 - update to 6.0.23-1.0.1
aspnetcore-runtime-6.0 - update to 6.0.23-1.0.1
aspnetcore-targeting-pack-6.0 - update to 6.0.23-1.0.1
dotnet-apphost-pack-6.0 - update to 6.0.23-1.0.1
dotnet-host - update to 6.0.23-1.0.1
dotnet-hostfxr-6.0 - update to 6.0.23-1.0.1
dotnet-targeting-pack-6.0 - update to 6.0.23-1.0.1
ceph-ansible (Red Hat package) - update to 6.0.28.8-1.el8cp
dotnet6 (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.123-0ubuntu1~22.04.1, 6.0.123-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet6.0 - update to 6.0.123-1
rh-dotnet60-dotnet (Red Hat package) - update to 6.0.123-1.el7_9
dotnet6.0 (Red Hat package) - addressed in versions 6.0.123-1.el8_6, 6.0.123-1.el8_8, 6.0.123-1.el9_0, 6.0.123-1.el9_2
dotnet - update to 6.0.123-1.0.1
netstandard-targeting-pack-2.1 - update to 6.0.123-1.0.1
dotnet-sdk-6.0 - update to 6.0.123-1.0.1
dotnet-sdk-6.0-source-built-artifacts - update to 6.0.123-1.0.1
dotnet-templates-6.0 - update to 6.0.123-1.0.1
Storage Ceph - update to 6.1z3
IBM Sterling Connect:Direct Web Services - addressed in versions 6.1.0.22, 6.2.0.20, 6.3.0.5
IBM Storage Scale System - addressed in versions 6.1.2.9, 6.1.9.2
IBM Spectrum Scale for IBM Elastic Storage Server - addressed in versions 6.1.2.9, 6.1.9.2
IBM Global High Availability Mailbox - update to 6.2.0.1
varnish (Red Hat package) - addressed in versions 6.6.2-2.el9_0.2, 6.6.2-3.el9_2.1
satellite (Red Hat package) - addressed in versions 6.11.5.6-1.el7sat, 6.11.5.6-1.el8sat, 6.12.5.2-1.el8sat, 6.13.5-1.el8sat
npm - addressed in versions 6.14.16-1.12.22.11.7, 6.14.16-1.12.22.11.9
UCD - IBM UrbanCode Deploy - addressed in versions 7.0.5.19, 7.1.2.15, 7.2.3.8, 7.3.2.3
rubygem-foreman_rh_cloud (Red Hat package) - update to 7.0.48-1.el8sat
aspnetcore-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-host-7.0 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-sdk-7.0 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet7 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-hostfxr-7.0 (Ubuntu package) - addressed in versions 7.0.112-0ubuntu1~22.04.1, 7.0.112-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet7.0 (Red Hat package) - addressed in versions 7.0.112-1.el8_8, 7.0.112-1.el9_2
IBM Tivoli Netcool Impact - update to 7.1.0.33
Rational Synergy - update to 7.2.2.7
grafana (Red Hat package) - addressed in versions 7.3.6-6.el8_4, 7.5.11-4.el8_6, 7.5.11-6.el9_0, 7.5.15-5.el8_8, 9.0.9-4.el9_2
varnish-debuginfo - update to 7.4.2-1
varnish-debugsource - update to 7.4.2-1
varnish - update to 7.4.2-1
varnish-devel - update to 7.4.2-1
varnish-help - update to 7.4.2-1
varnish - addressed in versions 7.4.2-1.fc40, 7.7.3-2.fc44
JBoss Enterprise Application Platform expansion pack (EAP XP) - update to 7.4.13
eap7-wildfly (Red Hat package) - addressed in versions 7.4.13-10.GA_redhat_00002.1.el7eap, 7.4.13-10.GA_redhat_00002.1.el8eap, 7.4.13-10.GA_redhat_00002.1.el9eap, 7.4.14-5.GA_redhat_00002.1.el7eap, 7.4.14-5.GA_redhat_00002.1.el8eap, 7.4.14-5.GA_redhat_00002.1.el9eap
grafana - update to 7.5.15-5.0.1
IBM Maximo Asset Management - update to 7.6.1.3.16
v8-devel - addressed in versions 7.8.279.23-1.12.22.11.7, 7.8.279.23-1.12.22.11.9
Bitbucket Data Center - addressed in versions 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2
Bitbucket Server - addressed in versions 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2
puppet-agent (Red Hat package) - addressed in versions 7.26.0-3.el6sat, 7.26.0-3.el7sat, 7.26.0-3.el8sat, 7.26.0-3.el9sat
dotnet-runtime-8.0 (Ubuntu package) - update to 8.0.0~rc2-0ubuntu1
aspnetcore-runtime-8.0 (Ubuntu package) - update to 8.0.0~rc2-0ubuntu1
dotnet-hostfxr-8.0 (Ubuntu package) - update to 8.0.0~rc2-0ubuntu1
dotnet-host-8.0 (Ubuntu package) - update to 8.0.0~rc2-0ubuntu1
dotnet-sdk-8.0 (Ubuntu package) - update to 8.0.100~rc2-0ubuntu1
dotnet8 (Ubuntu package) - update to 8.0.100-8.0.0~rc2-0ubuntu1
Dell EMC VxRail Appliance - update to 8.0.201
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.15
trafficserver (Debian package) - addressed in versions 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1
Storage Protect Server - update to 8.1.21
Storage Protect Operations Center - update to 8.1.22
IBM TXSeries for Multiplatforms - addressed in versions 8.2.0.3, 9.1.0.3
jbcs-httpd24-curl (Red Hat package) - addressed in versions 8.2.1-2.el7jbcs, 8.2.1-2.el8jbcs, 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs
tomcat8 - update to 8.5.94-1.95
Storage Virtualize - addressed in versions 8.6.0.4, 8.7.0.0
Maximo Application Suite - IoT Component - addressed in versions 8.7.20, 8.8.16, 9.0.6
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6
IBM Maximo Application Suite - addressed in versions 8.10.8, 8.10.9, 8.11.5, 8.11.6
npm - addressed in versions 8.19.4-1.16.20.2.3.0.2, 8.19.4-1.16.20.2.4.0.1, 9.8.1-1.18.18.2.1.0.1
Red Hat Build of OptaPlanner for Quarkus - update to 8.38.0 SP2
Virtualization Engine TS7700 3957-VED - addressed in versions 8.53.1.21 VTD_EXEC.903, 8.54.1.27 VTD_EXEC.904
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.53.1.21 VTD_EXEC.903, 8.54.1.27 VTD_EXEC.904
IBM MQ - addressed in versions 9.0.0.23, 9.1.0.20, 9.2.0.22, 9.3.5
tomcat9 (Debian package) - update to 9.0.43-2~deb11u7
tomcat-webapps - update to 9.0.62-5
tomcat-servlet-4.0-api - update to 9.0.62-5
tomcat-lib - update to 9.0.62-5
tomcat-jsp-2.3-api - update to 9.0.62-5
tomcat-el-3.0-api - update to 9.0.62-5
tomcat-docs-webapp - update to 9.0.62-5
tomcat-admin-webapps - update to 9.0.62-5
tomcat - update to 9.0.62-5
tomcat (Red Hat package) - addressed in versions 9.0.62-5.el8_8.2, 9.0.62-11.el9_2.3
jws5-tomcat (Red Hat package) - addressed in versions 9.0.62-16.redhat_00014.1.el7jws, 9.0.62-16.redhat_00014.1.el8jws, 9.0.62-16.redhat_00014.1.el9jws
tomcat9 - update to 9.0.71-1
tomcat-lib - update to 9.0.82-150200.46.1
tomcat-el-3_0-api - update to 9.0.82-150200.46.1
tomcat-admin-webapps - update to 9.0.82-150200.46.1
tomcat-webapps - update to 9.0.82-150200.46.1
tomcat-servlet-4_0-api - update to 9.0.82-150200.46.1
tomcat - update to 9.0.82-150200.46.1
tomcat-jsp-2_3-api - update to 9.0.82-150200.46.1
tomcat - addressed in versions 9.0.96-1, 9.0.96-2
tomcat-jsvc - addressed in versions 9.0.96-1, 9.0.96-2
tomcat-help - addressed in versions 9.0.96-1, 9.0.96-2
fmt (Red Hat package) - update to 9.1.0-1.el9
trafficserver - addressed in versions 9.2.3-1.el7, 9.2.3-1.el8, 9.2.3-1.el9, 9.2.3-1.fc37, 9.2.3-1.fc38, 9.2.3-1.fc39
jetty9 (Debian package) - addressed in versions 9.4.50-4+deb11u1, 9.4.50-4+deb12u2
jetty-minimal-javadoc - update to 9.4.53-150200.3.22.1
jetty-annotations - update to 9.4.53-150200.3.22.1
jetty-quickstart - update to 9.4.53-150200.3.22.1
jetty-continuation - update to 9.4.53-150200.3.22.1
jetty-deploy - update to 9.4.53-150200.3.22.1
jetty-jndi - update to 9.4.53-150200.3.22.1
jetty-proxy - update to 9.4.53-150200.3.22.1
jetty-webapp - update to 9.4.53-150200.3.22.1
jetty-fcgi - update to 9.4.53-150200.3.22.1
jetty-plus - update to 9.4.53-150200.3.22.1
jetty-openid - update to 9.4.53-150200.3.22.1
jetty-jsp - update to 9.4.53-150200.3.22.1
jetty-jmx - update to 9.4.53-150200.3.22.1
jetty-client - update to 9.4.53-150200.3.22.1
jetty-jaas - update to 9.4.53-150200.3.22.1
jetty-server - update to 9.4.53-150200.3.22.1
jetty-http-spi - update to 9.4.53-150200.3.22.1
jetty-util - update to 9.4.53-150200.3.22.1
jetty-http - update to 9.4.53-150200.3.22.1
jetty-servlet - update to 9.4.53-150200.3.22.1
jetty-security - update to 9.4.53-150200.3.22.1
jetty-io - update to 9.4.53-150200.3.22.1
jetty-util-ajax - update to 9.4.53-150200.3.22.1
jetty-cdi - update to 9.4.53-150200.3.22.1
jetty-servlets - update to 9.4.53-150200.3.22.1
jetty-xml - update to 9.4.53-150200.3.22.1
jetty-rewrite - update to 9.4.53-150200.3.22.1
jetty-ant - update to 9.4.53-150200.3.22.1
jetty-start - update to 9.4.53-150200.3.22.1
IBM DataPower Gateway - addressed in versions 10.0.1.16, 10.5.0.8
IBM Security Verify Governance - update to 10.0.2.0.2
IBM Security Verify Access - update to 10.0.6-ISS-ISVA-FP0000
Telco Service Activator - update to 10.1.1
tomcat10 (Debian package) - update to 10.1.6-1+deb12u1
IBM Power Hardware Management Console (HMC) - addressed in versions 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1
IBM Cognos Command Center - update to 10.2.5
npm10 - update to 10.24.1-150000.1.62.3
nodejs10-debuginfo - update to 10.24.1-150000.1.62.3
nodejs10-debugsource - update to 10.24.1-150000.1.62.3
nodejs10-docs - update to 10.24.1-150000.1.62.3
nodejs10 - update to 10.24.1-150000.1.62.3
nodejs10-devel - update to 10.24.1-150000.1.62.3
Rational Service Tester - update to 11.0.0
Rational Functional Tester (RFT) - update to 11.0.0
IBM Security Guardium - addressed in versions 11.0 p491, 11.0 p545, 12.0p15
rubygem-foreman_theme_satellite (Red Hat package) - update to 11.0.0.6-1.el8sat
eap7-infinispan (Red Hat package) - addressed in versions 11.0.18-1.Final_redhat_00001.1.el7eap, 11.0.18-1.Final_redhat_00001.1.el8eap, 11.0.18-1.Final_redhat_00001.1.el9eap
IBM CICS TX Advanced - update to 11.1.0.0 ifix15
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
Event Streams - update to 11.4.0
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 2
nodejs-libs - addressed in versions 12.22.11-7, 12.22.11-9
nodejs - addressed in versions 12.22.11-7, 12.22.11-9
nodejs-debuginfo - addressed in versions 12.22.11-7, 12.22.11-9
nodejs-docs - addressed in versions 12.22.11-7, 12.22.11-9
nodejs-full-i18n - addressed in versions 12.22.11-7, 12.22.11-9
nodejs-devel - addressed in versions 12.22.11-7, 12.22.11-9
nodejs-debugsource - addressed in versions 12.22.11-7, 12.22.11-9
npm12 - update to 12.22.12-150200.4.53.2
nodejs12-devel - update to 12.22.12-150200.4.53.2
nodejs12-debuginfo - update to 12.22.12-150200.4.53.2
nodejs12-debugsource - update to 12.22.12-150200.4.53.2
nodejs12-docs - update to 12.22.12-150200.4.53.2
nodejs12 - update to 12.22.12-150200.4.53.2
EMC Cloud Tiering Appliance - update to 13.1.0.2.35
rh-nodejs14-nodejs (Red Hat package) - update to 14.21.3-5.el7
nodejs14-debugsource - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
npm14 - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
nodejs14-debuginfo - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
nodejs14 - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
nodejs14-devel - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
nodejs14-docs - addressed in versions 14.21.3-6.49.1, 14.21.3-150200.15.52.2
corepack14 - update to 14.21.3-150200.15.52.2
Ceph - addressed in versions 16.2.10-266.el8cp, 16.2.10-266.el9cp
nodejs (Red Hat package) - addressed in versions 16.20.2-3.el9_0, 16.20.2-3.el9_2
nodejs - addressed in versions 16.20.2-3.0.2, 16.20.2-4.0.1, 18.18.2-1.0.1
nodejs-docs - addressed in versions 16.20.2-3.0.2, 16.20.2-4.0.1, 18.18.2-1.0.1
nodejs-devel - addressed in versions 16.20.2-3.0.2, 16.20.2-4.0.1, 18.18.2-1.0.1
nodejs-full-i18n - addressed in versions 16.20.2-3.0.2, 16.20.2-4.0.1, 18.18.2-1.0.1
nodejs16-docs - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
npm16 - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
nodejs16-debugsource - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
nodejs16-devel - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
nodejs16-debuginfo - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
nodejs16 - addressed in versions 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2
corepack16 - update to 16.20.2-150300.7.30.1
cachelib - addressed in versions 17^20231016-1.fc37, 17^20231016-1.fc38, 17^20231016-1.fc39, 17^20231016-1.fc40
nodejs - update to 18.18.0-1
nodejs18 - addressed in versions 18.18.2-1.fc37, 18.18.2-1.fc38, 18.18.2-1.fc39
nodejs18-docs - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
nodejs18-debugsource - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
nodejs18 - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
npm18 - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
nodejs18-debuginfo - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
nodejs18-devel - addressed in versions 18.18.2-8.15.1, 18.18.2-150400.9.15.1
Dell EMC NetWorker vProxy - addressed in versions 19.9.0.4, 19.10
EMC Data Protection Advisor - update to 19.10 PB22
nodejs20 - addressed in versions 20.8.1-1.fc37, 20.8.1-1.fc38, 20.8.1-1.fc39
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.27, 23.0.1.5
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.15, 23.0.16
openstack-ironic (Red Hat package) - update to 21.3.1-0.20231106145533.e53dc4f.el9
net-libs/nodejs - update to 22.4.1
IBM Business Automation Workflow - update to 23.0.2
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1
ovn23.09 (Red Hat package) - update to 23.09.0-37.el9fdp
libprotoc25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-64bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotoc25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
libprotoc25_1_0-64bit - update to 25.1-150400.9.3.1
libprotobuf25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-64bit - update to 25.1-150400.9.3.1
libprotoc25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
protobuf-devel-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-debuginfo - update to 25.1-150400.9.3.1
protobuf-debugsource - update to 25.1-150400.9.3.1
libprotobuf25_1_0 - update to 25.1-150400.9.3.1
protobuf-java - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0 - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-debuginfo - update to 25.1-150400.9.3.1
libprotoc25_1_0-debuginfo - update to 25.1-150400.9.3.1
protobuf-devel - update to 25.1-150400.9.3.1
libprotoc25_1_0 - update to 25.1-150400.9.3.1
nodejs-packaging - addressed in versions 26-1.0.1, 2021.06-4
eap7-guava-libraries (Red Hat package) - addressed in versions 32.1.1-2.jre_redhat_00001.1.el7eap, 32.1.1-2.jre_redhat_00001.1.el8eap, 32.1.1-2.jre_redhat_00001.1.el9eap
IBM Observability with Instana - update to 274
watchman - addressed in versions 2021.05.10.00-24.fc37, 2021.05.10.00-24.fc38, 2021.05.10.00-24.fc39, 2021.05.10.00-24.fc40
nodejs-packaging-bundler - update to 2021.06-4
ostree (Red Hat package) - update to 2023.8-3.el9
mvfst - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
wangle - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
proxygen - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
folly - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
fizz - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
fbthrift - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
fb303 - addressed in versions 2023.10.16.00-1.fc37, 2023.10.16.00-1.fc38, 2023.10.16.00-1.fc39, 2023.10.16.00-1.fc40
rpm-ostree (Red Hat package) - update to 2024.2-1.el9
libabsl2308_0_0-debuginfo - update to 20230802.1-150400.10.4.1
abseil-cpp-debugsource - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-32bit-debuginfo - update to 20230802.1-150400.10.4.1
abseil-cpp-devel - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-64bit-debuginfo - update to 20230802.1-150400.10.4.1
libabsl2308_0_0 - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-64bit - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-32bit - update to 20230802.1-150400.10.4.1
libre2-11 - update to 20240201-150400.9.3.1
libre2-11-32bit - update to 20240201-150400.9.3.1
re2-devel - update to 20240201-150400.9.3.1
re2-debugsource - update to 20240201-150400.9.3.1
libre2-11-32bit-debuginfo - update to 20240201-150400.9.3.1
libre2-11-64bit - update to 20240201-150400.9.3.1
libre2-11-64bit-debuginfo - update to 20240201-150400.9.3.1
libre2-11-debuginfo - update to 20240201-150400.9.3.1

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins