Skip to content
OpenAdvisories
Medium RHSA-2018:2071 2 CVEs

Red Hat Security Advisory: Red Hat Virtualization Manager security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-backend 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-dbscripts 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-extensions-api-impl 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-extensions-api-impl-javadoc 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-health-check-bundler 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-lib 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-restapi 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup-base 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup-plugin-ovirt-engine 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup-plugin-ovirt-engine-common 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup-plugin-vmconsole-proxy-helper 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-setup-plugin-websocket-proxy 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-tools 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-tools-backup 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-vmconsole-proxy-helper 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-webadmin-portal 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 ovirt-engine-websocket-proxy 0:4.2.4.5-0.1.el7_3
Red Hat · Rhev Manager 4 rhev_manager:4.2 rhvm 0:4.2.4.5-0.1.el7_3

Vulnerabilities 2

  • Medium 5.0
    CVE-2018-1072

    ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup …

    [UNKNOWN] ovirt-engine-setup
  • Medium 5.0
    CVE-2018-1075

    ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When eng…

    [UNKNOWN] ovirt-engine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1251468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1542508
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1575081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1576352
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1576752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1579268
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1582822
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1583579
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1583619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1584885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585013
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585039
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585454
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585455
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585456
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1587884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1587885
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2071.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1072
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1540622
  • report
    https://access.redhat.com/security/cve/CVE-2018-1075
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1075
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1075