Unified Monitoring Agent 0.1.36 released

A new release of the Unified Monitoring Agent (UMA) is now available with the following major updates:

• Added support for Red Hat Enterprise Linux 8 and 9
• Updated the Ruby version bundled with the UMA to 3.0.7, which resolves the following CVEs:
  • CVE-2023-36617: ReDoS vulnerability in URI
  • CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
  • CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
• Updated the OpenSSL version bundled with the Windows UMA to 3.0.15, which resolves the following CVEs:
  • Fixed unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)
  • Fixed an issue where checking excessively long DSA keys or parameters might be very slow (CVE-2024-4603)
  • Fixed potential use after free after SSL_free_buffers() is called (CVE-2024-4741)
  • Fixed possible buffer overread in SSL_select_next_proto() (CVE-2024-5535)
  • Fixed possible denial of service in X.509 name checks (CVE-2024-6119)