Skip to content
OpenAdvisories
Medium RHSA-2019:4201 1 CVE

Red Hat Security Advisory: CloudForms 5.0.1 security, bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-amazon-smartstate 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance-common 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance-tools 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-gemset 0:5.11.1.2-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 ovirt-ansible-hosted-engine-setup 0:1.0.28-1.el8ev
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 v2v-conversion-host 0:1.15.0-1.el8ev
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 v2v-conversion-host-ansible 0:1.15.0-1.el8ev

Vulnerabilities 1

  • Medium 5.5
    CVE-2019-16892

    Rubyzip denial of service

    In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

    rubyzip ruby-zip ruby-zip Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1713400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1730066
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1747179
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767548
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767648
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767659
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767774
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767775
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767786
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767788
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767796
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767809
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767818
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767834
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767835
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767836