Medium ELSA-2020-4689 1 CVE

Moderate: openwsman security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[2.6.5-7]
- Fix CVE-2019-3833
Resolves: #1687865

[2.6.5-6]
- Fix name of Patch6

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	libwsman-devel	0:2.6.5-7.el8
Oracle Linux · 8	libwsman1	0:2.6.5-7.el8
Oracle Linux · 8	openwsman-client	0:2.6.5-7.el8
Oracle Linux · 8	openwsman-python3	0:2.6.5-7.el8
Oracle Linux · 8	openwsman-server	0:2.6.5-7.el8

Vulnerabilities 1

High 7.5

CVE-2019-3833 EPSS 15%

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing spe…

[UNKNOWN] openwsman openwsman openwsman Ubuntu Azure Linux

Mar 14, 2019