RHSA-2023:0759MediumCVSS 5.5
Red Hat Security Advisory: Red Hat Virtualization security and bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2022-41946 — postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
🎯 Affected products33
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
- Red Hat Virtualization 4 Tools for Red Hat Enterprise Linux 8
- ovirt-ansible-collection-0:2.4.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-ansible-collection-0:2.4.2-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
- ovirt-ansible-collection-0:2.4.2-1.el8ev.noarch as a component of Red Hat Virtualization 4 Tools for Red Hat Enterprise Linux 8
- ovirt-ansible-collection-0:2.4.2-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-ansible-collection-0:2.4.2-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
- ovirt-ansible-collection-0:2.4.2-1.el8ev.src as a component of Red Hat Virtualization 4 Tools for Red Hat Enterprise Linux 8
- ovirt-engine-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-0:4.5.3.7-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-backend-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-dbscripts-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-health-check-bundler-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-restapi-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-base-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-cinderlib-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-imageio-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-ovirt-engine-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-ovirt-engine-common-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-vmconsole-proxy-helper-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-setup-plugin-websocket-proxy-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-tools-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-tools-backup-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-vmconsole-proxy-helper-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-webadmin-portal-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- ovirt-engine-websocket-proxy-0:4.5.3.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- postgresql-jdbc-0:42.2.14-2.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- postgresql-jdbc-0:42.2.14-2.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
- +3 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891 If the postgresql service is running, it will be automatically restarted after installing this update.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2023:0759
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2151549
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2153399
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2159768
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2161703
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0759.json