Red Hat Security Advisory

RHSA-2019:4201

CloudForms 5.0.1 security, bug fix and enhancement update

Released 2019-12-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CloudForms Management Engine 5.11 cfme-5.11.1.2-1.el8cf, cfme-amazon-smartstate-5.11.1.2-1.el8cf, cfme-appliance-5.11.1.2-1.el8cf +6

TI-2019-12597 CVE-2019-16892 · GHSA-5m2v-hc64-56h6

LOW 28

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01581 Published 2019-09-25 Fixed in 1.3.0 CWE-400