{"id":"RHSA-2019:1833","summary":"Red Hat Security Advisory: CloudForms 4.7.7 security, bug fix and enhancement update","modified":"2026-02-21T10:03:06Z","published":"2024-09-16T02:43:02Z","upstream":["CVE-2019-12439"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1833"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#low"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695963"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702497"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721118"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724715"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725894"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725960"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726388"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726394"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726438"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726667"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727970"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727989"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727990"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728033"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1833.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2019-12439"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2019-12439"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12439"}],"affected":[{"package":{"name":"ansible-runner","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-2.el7ar"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower-server","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower-setup","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower-setup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower-ui","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower-venv-ansible","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower-venv-ansible"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ansible-tower-venv-tower","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ansible-tower-venv-tower"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-1.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"bubblewrap","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/bubblewrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-2.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"bubblewrap-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/bubblewrap-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-2.el7at"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-amazon-smartstate","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-amazon-smartstate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-appliance","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-appliance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-appliance-common","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-appliance-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-appliance-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-appliance-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-appliance-tools","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-appliance-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-gemset","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-gemset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"cfme-gemset-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/cfme-gemset-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.7.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ovirt-ansible-hosted-engine-setup","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ovirt-ansible-hosted-engine-setup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-1.el7ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ovirt-ansible-image-template","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ovirt-ansible-image-template"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.el7ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ovirt-ansible-manageiq","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ovirt-ansible-manageiq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.14-1.el7ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"ovirt-ansible-vm-infra","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/ovirt-ansible-vm-infra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.18-1.el7ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}},{"package":{"name":"python2-ansible-runner","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","purl":"pkg:rpm/redhat/python2-ansible-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-2.el7ar"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:1833.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}