{"id":"RHEA-2019:1283","summary":"Red Hat Enhancement Advisory: RHUI 3.1 bug fix and enhancement update","modified":"2026-07-01T10:05:14Z","published":"2024-09-13T16:48:50Z","upstream":["CVE-2018-10917"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHEA-2019:1283"},{"type":"ARTICLE","url":"https://access.redhat.com/solutions/3883461"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278954"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578266"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593218"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599116"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695464"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698806"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707778"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhea-2019_1283.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-10917"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598928"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-10917"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10917"}],"affected":[{"package":{"name":"kobo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/kobo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libmodulemd","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libmodulemd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libmodulemd-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libmodulemd-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libsolv","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libsolv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.pulp.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libsolv-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libsolv-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.pulp.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libstemmer","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libstemmer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"libstemmer-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/libstemmer-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"mongodb","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/mongodb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"mongodb-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/mongodb-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"mongodb-server","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/mongodb-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-admin-client","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-admin-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-rpm","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-rpm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-rpm-admin-extensions","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-rpm-admin-extensions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-rpm-plugins","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-rpm-plugins"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-selinux","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-selinux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"pulp-server","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/pulp-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-amqp","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-amqp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-billiard","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-billiard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-billiard-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-billiard-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-celery","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-celery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-django","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-django"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.13-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-kid","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-kid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-11.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-kombu","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-kombu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-9.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-bindings","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-bindings"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-client-lib","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-client-lib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-common","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-oid_validation","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-oid_validation"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-repoauth","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-repoauth"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-pulp-rpm-common","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-pulp-rpm-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.1.1-2.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python-vine","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python-vine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-amqp","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-amqp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-billiard","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-billiard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-celery","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-celery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-django","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-django"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.13-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-kombu","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-kombu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-9.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-solv","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-solv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.pulp.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"python2-vine","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/python2-vine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"repoview","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/repoview"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6-4.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"rh-rhui-tools","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/rh-rhui-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"rh-rhui-tools-libs","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/rh-rhui-tools-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"rhui-installer","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/rhui-installer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"rhui-installer-base","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/rhui-installer-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"rhui-oid-validator","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/rhui-oid-validator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"yaml-cpp","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/yaml-cpp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-7.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}},{"package":{"name":"yaml-cpp-debuginfo","ecosystem":"Red Hat:rhui:3::el7","purl":"pkg:rpm/redhat/yaml-cpp-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-7.el7ui"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHEA-2019:1283.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H"}]}