RHSA-2012:0421Medium
Red Hat Security Advisory: rhevm security and bug fix update
🔗 CVE IDs covered (2)
📋 Description
CVE-2011-5245 — RESTEasy: XML eXternal Entity (XXE) flaw CVE-2012-0818 — RESTEasy: XML eXternal Entity (XXE) flaw
🎯 Affected products17
- RHEV-M for Servers
- rhevm-0:3.0.3_0001-3.el6.src as a component of RHEV-M for Servers
- rhevm-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-backend-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-config-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-dbscripts-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-debuginfo-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-genericapi-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-iso-uploader-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-jboss-deps-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-log-collector-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-notification-service-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-restapi-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-setup-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-tools-common-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-userportal-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
- rhevm-webadmin-portal-0:3.0.3_0001-3.el6.x86_64 as a component of RHEV-M for Servers
✅ Remediation
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Follow the upgrade procedure in the Red Hat Enterprise Virtualization Installation Guide to install these updated packages: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Installation_Guide/chap-Installation_Guide-Installing_the_RHEV_Manager-Upgrades.html
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2012:0421
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Installation_Guide/chap-Installation_Guide-Installing_the_RHEV_Manager-Upgrades.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=785631
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0421.json