Carefully crafted input can cause header parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector.
Created rubygem-rack tracking bugs for this issue: Affects: epel-all [bug 2179652] Affects: fedora-all [bug 2179651]
References: https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466 https://rubysec.com/advisories/CVE-2023-27539/ https://github.com/rack/rack/commit/231ef369ad0b542575fb36c74fcfcfabcf6c530c (v3.0.6.1) https://github.com/rack/rack/commit/ee7919ea04303717858be1c3f16b406adc6d8cff (v2.2.6.4)
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Extended Update Support Via RHSA-2023:1961 https://access.redhat.com/errata/RHSA-2023:1961
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2023:1981 https://access.redhat.com/errata/RHSA-2023:1981
This issue has been addressed in the following products: RHOL-5.6-RHEL-8 Via RHSA-2023:1953 https://access.redhat.com/errata/RHSA-2023:1953
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:2652 https://access.redhat.com/errata/RHSA-2023:2652
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:3082 https://access.redhat.com/errata/RHSA-2023:3082
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2023:3403 https://access.redhat.com/errata/RHSA-2023:3403
This issue has been addressed in the following products: RHOL-5.7-RHEL-8 Via RHSA-2023:3495 https://access.redhat.com/errata/RHSA-2023:3495
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2023-27539
This issue has been addressed in the following products: Red Hat Satellite 6.14 for RHEL 8 Via RHSA-2023:6818 https://access.redhat.com/errata/RHSA-2023:6818