Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.9] 0-day

Fixed packages 2

Vulnerabilities 4

• Medium 5.5
  CVE-2021-3620

  Ansible discloses sensitive information in traceback error message

  A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

  ansible ansible ansible ansible-core Debian Ubuntu PyPI
  Mar 3, 2022
• Unscored —
  CVE-2020-16135

  libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

  libssh libssh libssh Debian Ubuntu Alpine
  Jul 29, 2020
• Unscored —
  CVE-2021-0512

  In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffe…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Jun 21, 2021
• Unscored —
  CVE-2021-43267 Public exploit EPSS 58%

  An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communic…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 2, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1862456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1953685
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958101
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1974491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1975175
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1975767
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1983021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1998104
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2004469
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2020362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2024360
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4750.json
• report
  https://access.redhat.com/security/cve/CVE-2020-16135
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16135
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16135
• article
  https://bugs.gentoo.org/734624
• report
  https://access.redhat.com/security/cve/CVE-2021-0512
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-0512
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-0512
• article
  https://lore.kernel.org/lkml/20210301161013.666159680@linuxfoundation.org/
• report
  https://access.redhat.com/security/cve/CVE-2021-3620
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3620
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3620
• report
  https://access.redhat.com/security/cve/CVE-2021-43267
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-43267
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-43267