Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-api | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-client | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-common | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-gluster | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-checkips | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-cpuflags | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-ethtool-options | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-extra-ipv4-addrs | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-fcoe | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-localdisk | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-nestedvt | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-openstacknet | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-hook-vhostmd | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-http | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-jsonrpc | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-network | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-python | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | vdsm-yajsonrpc | 0:4.50.3.6-1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | apache-sshd | 1:2.9.2-0.1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | apache-sshd-javadoc | 1:2.9.2-0.1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-ui-extensions | 0:1.3.7-1.el8ev |
Vulnerabilities 2
-
Critical 9.8CVE-2022-45047 Public exploit
Apache MINA SSHD: Java unsafe deserialization vulnerability
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…
-
Medium 5.3
Directory Traversal in isomorphic-git
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1988539
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2126778
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2141371
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2144346
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2145194
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2152015
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2152845
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0074.json
-
report
https://access.redhat.com/security/cve/CVE-2021-30483
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-30483
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-30483
-
article
https://github.com/isomorphic-git/isomorphic-git/pull/1339
-
article
https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.8.2
-
article
https://vuln.ryotak.me/advisories/28
-
report
https://access.redhat.com/security/cve/CVE-2022-45047
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-45047
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-45047
-
article
https://www.mail-archive.com/dev@mina.apache.org/msg39312.html