Red Hat Security Advisory: CloudForms 4.7.9 security, bug fix and enhancement update

Fixed packages 21

Vulnerabilities 2

• Medium 6.5
  CVE-2018-10854

  cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in Clo…

  Red Hat CloudForms
  Nov 22, 2019
• Medium 6.1
  CVE-2019-11358 Public exploit EPSS 87%

  XSS in jQuery as used in Drupal, Backdrop CMS, and other products

  jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

  mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems
  Apr 19, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1590538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1677580
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1701972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1733376
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737123
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1737618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740228
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740229
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740767
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740769
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740844
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741634
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741635
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741944
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741945
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743266
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2587.json
• report
  https://access.redhat.com/security/cve/CVE-2018-10854
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10854
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10854
• report
  https://access.redhat.com/security/cve/CVE-2019-11358
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11358
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11358
• article
  https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
• article
  https://www.drupal.org/sa-core-2019-006