Skip to content
OpenAdvisories
High RHEA-2017:3138 1 CVE

Red Hat Enhancement Advisory: Red Hat Virtualization Manager (ovirt-engine) 4.1.7

Published Sep 13, 2024 · Updated Jul 1, 2026

Fixed packages 20

ReleasePackageFixed in
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-backend 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-dbscripts 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-extensions-api-impl 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-extensions-api-impl-javadoc 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-lib 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-restapi 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup-base 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup-plugin-ovirt-engine 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup-plugin-ovirt-engine-common 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup-plugin-vmconsole-proxy-helper 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-setup-plugin-websocket-proxy 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-tools 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-tools-backup 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-userportal 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-vmconsole-proxy-helper 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-webadmin-portal 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 ovirt-engine-websocket-proxy 0:4.1.7.6-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4 rhevm 0:4.1.7.6-0.1.el7

Vulnerabilities 1

  • High 7.2

    ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Onl…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1485688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1487981
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1489677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1490089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1494916
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1495163
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1496399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1496681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1498478
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1502510
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1507315
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1507316
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhea-2017_3138.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-15113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1512365
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15113
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15113