Red Hat Security Advisory: CloudForms 4.6.6 security, bug fix and enhancement update

Fixed packages 22

Vulnerabilities 4

• High 8.5
  CVE-2018-10915

  A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its inte…

  PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Aug 9, 2018
• High 7.1
  CVE-2018-10925

  It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check aut…

  PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.5 Ubuntu Alpine
  Aug 9, 2018
• Unscored —
  CVE-2018-1053

  In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, p…

  The PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Feb 9, 2018
• Unscored —
  CVE-2018-1058 Public exploit EPSS 13%

  A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wi…

  The PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Mar 2, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1539619
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547044
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1610547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612619
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1618836
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634809
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635255
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635759
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638501
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640629
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640631
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643042
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643539
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643959
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1644410
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645204
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646564
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646599
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646604
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646605
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646606