Medium ELSA-2020-3940 1 CVE

Moderate: openwsman security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[2.6.3-7.git4391e5c]
- Fix CVE-2019-3833
Resolves: #1677691

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	libwsman-devel	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	libwsman1	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	openwsman-client	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	openwsman-perl	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	openwsman-python	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	openwsman-ruby	0:2.6.3-7.git4391e5c.el7
Oracle Linux · 7	openwsman-server	0:2.6.3-7.git4391e5c.el7

Vulnerabilities 1

High 7.5

CVE-2019-3833 EPSS 15%

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing spe…

[UNKNOWN] openwsman openwsman openwsman Ubuntu Azure Linux

Mar 14, 2019