Lucene search
RedHatRHSA-2019:2439HistoryAug 12, 2019 - 10:52 a.m.
(RHSA-2019:2439) Moderate: rhvm-appliance security, bug fix, and enhancement update
2019-08-1210:52:42
access.redhat.com
74
0.021 Low
EPSS
Percentile
89.1%
The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal.
The following packages have been upgraded to a later upstream version: rhvm-appliance (4.3). (BZ#1669364, BZ#1684987, BZ#1697231, BZ#1720255)
Security Fix(es):
-
rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled (CVE-2018-16881)
-
openssl: 0-byte record padding oracle (CVE-2019-1559)
-
undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed (CVE-2019-3888)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | rhvm-appliance | < 4.3-20190722.0.el7 | rhvm-appliance-4.3-20190722.0.el7.x86_64.rpm |
Related
nessus
nessus
RHEL 7 : Virtualization Manager (RHSA-2019:2439)
2019-08-13 00:00:00
openSUSE Security Update : rsyslog (openSUSE-2019-154)
2019-02-11 00:00:00
EulerOS Virtualization 2.5.3 : rsyslog (EulerOS-SA-2019-1243)
2019-04-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for rsyslog (EulerOS-SA-2019-1073)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for rsyslog (EulerOS-SA-2019-1245)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2019-0110)
2022-01-28 00:00:00
prion
prion
Denial of service
2019-01-25 18:29:00
Design/Logic Flaw
2019-06-12 14:29:00
Design/Logic Flaw
2019-02-27 23:29:00
cvelist
cvelist
CVE-2018-16881
2019-01-25 18:00:00
CVE-2019-3888
2019-06-12 13:45:20
CVE-2019-1559 0-byte record padding oracle
2019-02-26 00:00:00
oraclelinux
oraclelinux
rsyslog security and bug fix update
2019-08-13 00:00:00
cve
cve
ubuntucve
ubuntucve
centos
centos
rsyslog security update
2019-08-30 04:16:27
openssl security update
2019-08-16 21:53:45
openssl security update
2019-08-30 03:49:42
amazon
amazon
Medium: rsyslog
2019-11-19 17:54:00
Medium: openssl
2019-04-04 21:45:00
Medium: openssl
2019-04-04 19:13:00
mageia
mageia
Updated rsyslog packages fix security vulnerability
2019-03-15 00:39:55
Updated openssl packages fix security vulnerability
2019-03-07 19:34:45
osv
osv
CVE-2018-16881
2019-01-25 18:29:00
CVE-2019-3888
2019-06-12 14:29:04
Credential exposure through log files in Undertow
2019-06-13 20:02:56
debiancve
debiancve
nvd
nvd
suse
suse
Security update for rsyslog (important)
2019-02-08 00:00:00
Security update for openssl (moderate)
2019-04-08 00:00:00
Security update for openssl-1_0_0 (moderate)
2019-05-22 00:00:00
github
github
Credential exposure through log files in Undertow
2019-06-13 20:02:56
veracode
veracode
Information Disclosure
2019-06-13 06:24:11
Denial Of Service (Dos)
2019-08-08 00:07:20
Padding Oracle Attack
2019-03-01 01:32:23
redhat
redhat
(RHSA-2019:2110) Moderate: rsyslog security and bug fix update
2019-08-06 08:01:59
(RHSA-2019:2471) Moderate: openssl security update
2019-08-13 14:07:51
(RHSA-2019:2437) Important: Red Hat Virtualization security update
2019-08-12 10:51:59
redhatcve
redhatcve
CVE-2019-3888
2019-10-08 23:05:01
CVE-2019-1559
2019-10-08 17:49:09
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.2r-alt1
2019-03-20 00:00:00
aix
aix
There is a vulnerability in OpenSSL used by AIX.
2019-04-16 10:48:55
freebsd
freebsd
OpenSSL -- Padding oracle vulnerability
2019-02-19 00:00:00
cloudfoundry
cloudfoundry
USN-3899-1: OpenSSL vulnerability | Cloud Foundry
2019-03-21 00:00:00
paloalto
paloalto
OpenSSL vulnerability CVE-2019-1559 has been resolved in PAN-OS
2019-12-04 17:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2019-02-27 00:00:00
debian
debian
[SECURITY] [DSA 4400-1] openssl1.0 security update
2019-02-28 22:13:35
[SECURITY] [DLA 1701-1] openssl security update
2019-03-01 22:55:06
[SECURITY] [DLA 3016-1] rsyslog security update
2022-05-20 21:58:25
f5
f5
K18549143 : OpenSSL vulnerability CVE-2019-1559
2019-03-19 00:00:00
archlinux
archlinux
[ASA-201903-6] lib32-openssl-1.0: information disclosure
2019-03-03 00:00:00
[ASA-201903-2] openssl-1.0: information disclosure
2019-03-02 00:00:00
alpinelinux
alpinelinux
CVE-2019-1559
2019-02-27 23:29:00
symantec
symantec
OpenSSL CVE-2019-1559 Information Disclosure Vulnerability
2019-02-26 00:00:00
slackware
slackware
[slackware-security] openssl (slackware 14.2)
2019-02-27 04:12:59
qualysblog
qualysblog
Zombie POODLE and GOLDENDOODLE Vulnerabilities
2019-04-22 08:40:40
openssl
openssl
Vulnerability in OpenSSL CVE-2019-1559
2019-02-26 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2019-03-14 00:00:00