Linux · Security advisory · October 23, 2023

RHSA-2023:5989: Security update for 4 packages

RHSA-2023:5989, released October 23, 2023, fixes 1 CVE across 4 products. One of them is being exploited (CVE-2023-44487); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2023-44487

Exploitation more likely

Vendor assessment

Highest EPSS

1.0000

99th percentile

Fixed package versions

Product	Release	Fixed in
varnish	RHEL 8	0:6.0.8-3.module+el8.8.0+20455+bdc2c048.1
varnish-devel	RHEL 8	0:6.0.8-3.module+el8.8.0+20455+bdc2c048.1
varnish-docs	RHEL 8	0:6.0.8-3.module+el8.8.0+20455+bdc2c048.1
varnish-modules	RHEL 8	0:0.15.0-6.module+el8.5.0+11976+0b4af72d

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2023-44487	MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack		7.5	1.0000	KEVExploited

Also fixes CVE-2023-44487

KB5031364
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5031361
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems and 2 more
KB5031354
Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems
KB5031358
Windows 11 version 21H2 for ARM64-based Systems, Windows 11 version 21H2 for x64-based Systems
KB5031356
Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more
KB5031362
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more
KB5032875
.NET 7.0
KB5032874
.NET 6.0

Vendor advisory

https://access.redhat.com/errata/RHSA-2023:5989

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo