Red Hat Security AdvisoryRHSA-2023:0074
RHV 4.4 SP1 [ovirt-4.5.3-3] security update
Released 2023-01-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 apache-sshd-1:2.9.2-0.1.el8ev, apache-sshd-javadoc-1:2.9.2-0.1.el8ev, ovirt-engine-ui-extensions-1.3.7-1.el8ev
- Red Hat Virtualization 4 Hypervisor for RHEL 8 vdsm-4.50.3.6-1.el8ev, vdsm-hook-checkips-4.50.3.6-1.el8ev, vdsm-hook-cpuflags-4.50.3.6-1.el8ev +7
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts vdsm-4.50.3.6-1.el8ev, vdsm-api-4.50.3.6-1.el8ev, vdsm-client-4.50.3.6-1.el8ev +16
Fixes 2 records
Priority HIGH 82
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0381 · Published 2022-11-16 · Partial fix · 2.9.2 CWE-502
Priority LOW 28
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02182 · Published 2021-07-27 · Fixed in 1.8.2 CWE-22
