Skip to content
OpenAdvisories
Critical RHSA-2018:3466 1 CVE

Red Hat Security Advisory: CloudForms 4.6.5 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-server 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-setup 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-ui 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-venv-ansible 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 ansible-tower-venv-tower 0:3.2.7-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-amazon-smartstate 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-common 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-debuginfo 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-appliance-tools 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-debuginfo 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset 0:5.9.5.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.9::el7 cfme-gemset-debuginfo 0:5.9.5.3-1.el7cf

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-1000544

    Rubyzip gem contains a Directory Traversal vulnerability in zip file component

    rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , a…

    rubyzip ruby-zip ruby-zip Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1592571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1593001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1599349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1603026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607438
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1608368
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1608770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1612905
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613333
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1615465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618800
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618805
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618807
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618808
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1619431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1619654
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1621441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1621445
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1621449
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1622631
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1622652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623557
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623563
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623565
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1625249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1625323
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1625376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626219
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626474