Red Hat Security Advisory: Red Hat Virtualization Engine security, bug fix and enhancement update
An update is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-19336US | medium6.1 | — | ||
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:0498self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1688781external
- 1739106external
- 1754979external
- 1757423external
- 1772506external
- 1773580external
Behebungen (41)
- Behobenovirt-engine-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-0:4.3.8.2-0.4.el7.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-backend-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-dbscripts-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-dwh-0:4.3.8-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-dwh-0:4.3.8-1.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-dwh-setup-0:4.3.8-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-extensions-api-impl-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-extensions-api-impl-javadoc-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-health-check-bundler-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-metrics-0:1.3.6.2-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-metrics-0:1.3.6.2-1.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-restapi-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-base-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-plugin-cinderlib-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-plugin-ovirt-engine-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-plugin-ovirt-engine-common-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-plugin-vmconsole-proxy-helper-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-setup-plugin-websocket-proxy-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-tools-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-tools-backup-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-vmconsole-proxy-helper-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-webadmin-portal-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-engine-websocket-proxy-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-fast-forward-upgrade-0:1.0.0-16.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-fast-forward-upgrade-0:1.0.0-16.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-common-0:1.5.3-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-common-0:1.5.3-0.el7ev.x86_64 as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-common-debuginfo-0:1.5.3-0.el7ev.x86_64 as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-proxy-0:1.5.3-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-proxy-0:1.5.3-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-imageio-proxy-setup-0:1.5.3-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-web-ui-0:1.6.0-2.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenovirt-web-ui-0:1.6.0-2.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenpython2-ovirt-engine-lib-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenrhv-log-collector-analyzer-0:0.2.15-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenrhv-log-collector-analyzer-0:0.2.15-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenrhvm-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenv2v-conversion-host-0:1.16.0-3.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Behobenv2v-conversion-host-ansible-0:1.16.0-3.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan