Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update

Fixed packages 1

Vulnerabilities 3

• Unscored —
  CVE-2015-8011

  Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to…

  openvswitch openvswitch openvswitch lldpd Debian Ubuntu Alpine
  Jan 28, 2020
• Unscored —
  CVE-2020-14349

  It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_pa…

  postgresql15 postgresql-10 postgresql-12 postgresql14 Ubuntu Alpine
  Aug 24, 2020
• Unscored —
  CVE-2020-14350

  It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Ubuntu Alpine
  Aug 24, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1865744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1865746
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1896536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915881
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0988.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8011
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8011
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8011
• article
  http://www.openwall.com/lists/oss-security/2015/10/16/2
• article
  http://www.openwall.com/lists/oss-security/2015/10/30/2
• report
  https://access.redhat.com/security/cve/CVE-2020-14349
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14349
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14349
• report
  https://access.redhat.com/security/cve/CVE-2020-14350
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14350
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14350