- Vulnerability/
- RHSA-2023:0759
RHSA-2023:0759: Moderate: Red Hat Virtualization security and bug fix update
First published: Tue Feb 14 2023(Updated: )
PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.<br>Security Fix(es):<br><li> postgresql-jdbc: PreparedStatement.setText(int, InputStream) will create a temporary file if the InputStream is larger than 2k (CVE-2022-41946)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> With this release, the upgrade function of the ovirt_host module waits long enough for the upgraded host to reach the desired state after upgrade. (BZ#2161703)</li> <li> Previously,the ovirt-enghine ansible-runner artifacts were only cleaned once, and the machine could run out of free disk space on the /var partition. In this release, the artifacts are cleaned periodically according to values defined in the AnsibleRunnerArtifactsCleanupCheckTimeInHours and AnsibleRunnerArtifactsLifetimeInDays engine-config options. (BZ#2151549)</li> <li> Code change for BZ2089299 introduced a regression, which didn't allow to set options in the engine-config which restricted the allowable values using the validValues field (for example ClientModeVncDefault or UserSessionTimeOutInterval). </li> In this release, setting values for those fields works the same way as in RHV versions earlier than RHV 4.4 SP1 batch 3 (ovirt-engine-4.5.3). (BZ#2159768)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/ovirt-ansible-collection | <2.4.2-1.el8e | 2.4.2-1.el8e |
| redhat/ovirt-engine | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/postgresql-jdbc | <42.2.14-2.el8e | 42.2.14-2.el8e |
| redhat/ovirt-engine-backend | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-dbscripts | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-health-check-bundler | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-restapi | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-base | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-cinderlib | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-imageio | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-ovirt-engine | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-ovirt-engine-common | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-setup-plugin-websocket-proxy | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-tools | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-tools-backup | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-vmconsole-proxy-helper | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-webadmin-portal | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/ovirt-engine-websocket-proxy | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/postgresql-jdbc-javadoc | <42.2.14-2.el8e | 42.2.14-2.el8e |
| redhat/python3-ovirt-engine-lib | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
| redhat/rhvm | <4.5.3.7-1.el8e | 4.5.3.7-1.el8e |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2151549
- https://bugzilla.redhat.com/show_bug.cgi?id=2153399
- https://bugzilla.redhat.com/show_bug.cgi?id=2159768
- https://bugzilla.redhat.com/show_bug.cgi?id=2161703
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/errata/RHSA-2023:0759 (Advisory)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:0759
- agent/software-canonical-lookup
- package-manager/redhat