Skip to content
OpenAdvisories
Critical RHSA-2018:1328 3 CVEs

Red Hat Security Advisory: CloudForms 4.6.2 bug fix and enhancement update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible 0:2.4.4.0-1.el7ae
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-doc 0:2.4.4.0-1.el7ae
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-server 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-setup 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-ui 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-venv-ansible 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-venv-tower 0:3.2.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-amazon-smartstate 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-common 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-debuginfo 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-tools 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-debuginfo 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset-debuginfo 0:5.9.2.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 dbus-api-service 0:1.0.1-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 httpd-configmap-generator 0:0.2.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-contrib 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-debuginfo 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-devel 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-docs 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-libs 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-plperl 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-plpython 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-pltcl 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-server 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 postgresql96-test 0:9.6.6-1PGDG.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 python-paramiko 0:2.1.1-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 python-paramiko-doc 0:2.1.1-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-json 0:2.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-json-debuginfo 0:2.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-json-doc 0:2.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-qpid_proton 0:0.22.0-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-qpid_proton-debuginfo 0:0.22.0-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 rh-ruby23-rubygem-qpid_proton-doc 0:0.22.0-2.el7cf

Vulnerabilities 3

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2018-1101

    Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows f…

    Red Hat Ansible Tower
  • Unscored —
    CVE-2018-1104

    Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a jo…

    Red Hat Ansible Tower

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1495849
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1510499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1526086
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1526088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1530680
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1530760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1538094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1538100
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549722
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550728
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1551692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1551696
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1551698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1551703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552269
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552282
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552288
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552301
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552323
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552335
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552673
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1552723