{"cves":["CVE-2024-7259"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[4.4.10.7-1.0.33]\n- Fix external providers properties observability\n\n[4.4.10.7-1.0.32]\n- Upgrade bundled frontend dependency of jquery-ui\n\n[4.4.10.7-1.0.31]\n- Allow enrolling certificates in non-responsive state and Extend the lifetime of non-web certificates\n\n[4.4.10.7-1.0.30]\n- Fix network exception handling and fencing flow logic.\n\n[4.4.10.7-1.0.29]\n- Fixing the manage events form email display\n\n[4.4.10.7-1.0.28]\n- Remove taa-no from Secure Skylake Server\n\n[4.4.10.7-1.0.27]\n- Updating the jquery to 3.6.0\n\n[4.4.10.7-1.0.26]\n- Check locale for path traversal character\n\n[4.4.10.7-1.0.25]\n- Hide the icons directory from listable directories\n\n[4.4.10.7-1.0.24]\n- Fixed the packing of ova where ovf length was changed after encoding\n\n[4.4.10.7-1.0.23]\n- Fixed the issue of renewing vm-console-proxy and ovn certificates during engine-setup\n\n[4.4.10.7-1.0.22]\n- Fix the engine url for vmconsole to use https protocol\n\n[4.4.10.7-1.0.21]\n- Fix classpath for SecureByteArrayOutputStream after apache-sshd-2.9 update\n\n[4.4.10.7-1.0.20]\n- Wait for loop device to be available\n\n[4.4.10.7-1.0.19]\n- Clean old nvram file on vm emulator update to uefi secure boot\n\n[4.4.10.7-1.0.18]\n- Added support to use postgresql-jdbc-42.2.14-1 and spring framework 5.3.19\n- Cleanup the spec file to remove unneeded or commented lines\n\n[4.4.10.7-1.0.17]\n- Stopping the ovirt-engine-dwh service and setting the DwhCurrentlyRunning to 0 when changing password encryption from md5 to scram-sha-256.\n\n[4.4.10.7-1.0.16]\n- Included the condition of origin as NULL while inserting the data in vm_ovf_generations table\n\n[4.4.10.7-1.0.15]\n- Fix to parse both uppercase and camelcase instanceID in OvfReader\n\n[4.4.10.7-1.0.14]\n- Back Port from upstream 4.5 - https://gerrit.ovirt.org/c/ovirt-engine/+/116317/\n\n[4.4.10.7-1.0.13]\n-  Remove movirt as it is deprecated upstream\n\n[4.4.10.7-1.0.12]\n- Changing the password ecryption type in postgres from md5 to scram-sha-256\n\n[4.4.10.7-1.0.11]\n-  Add NumOfPciExpressPorts as configurable attribute\n\n[4.4.10.7-1.0.10]\n- Forward port - Support for Windows 11 and Windows Server 2022\n\n[4.4.10.7-1.0.9]\n- Forward port from 4.3.6.6-1.0.16, added Skylake-Server-noTSX-IBRS and Cascadelake-Server-noTSX CPU Types\n\n[4.4.10.7-1.0.8]\n-  Forward Port - Fix qxl video\n\n[4.4.10.7-1.0.7]\n-  Forward Port - Fix NPE during ova import operation\n\n[4.4.10.7-1.0.6]\n-  Forward Port from 4.3 - Handle ova when origin is null and storage disk is block\n\n[4.4.10.7-1.0.5]\n-  Forward Port from 4.3 - Remove unnecessary name length restriction for templates.\n\n[4.4.10.7-1.0.4]\n-  Port forward - Add hsts response header to httpd conf\n\n[4.4.10.7-1.0.3]\n-  Remove memory limit\n\n[4.4.10.7-1.0.2]\n-  Fix OS detection\n\n[4.4.10.7]\n- Bump version to 4.4.10.7\n\n[4.4.10.6]\n- Bump version to 4.4.10.6\n\n[4.4.10.5]\n- Bump version to 4.4.10.5\n\n[4.4.10.4]\n- Bump version to 4.4.10.4\n\n[4.4.10.3]\n- Bump version to 4.4.10.3\n\n[4.4.10.2]\n- Bump version to 4.4.10.2\n\n[4.4.10.1]\n- Bump version to 4.4.10.1\n\n[4.4.10]\n- Bump version to 4.4.10\n\n[4.4.9.2]\n- Bump version to 4.4.9.2\n\n[4.4.9.1]\n- Bump version to 4.4.9.1\n\n[4.4.9]\n- Bump version to 4.4.9\n\n[4.4.8.4]\n- Bump version to 4.4.8.4\n\n[4.4.8.3]\n- Bump version to 4.4.8.3\n\n[4.4.8.2]\n- Bump version to 4.4.8.2\n\n[4.4.8.1]\n- Bump version to 4.4.8.1\n\n[4.4.8]\n- Bump version to 4.4.8\n\n[4.4.7.6]\n- Bump version to 4.4.7.6\n\n[4.4.7.5]\n- Bump version to 4.4.7.5\n\n[4.4.7.4]\n- Bump version to 4.4.7.4\n\n[4.4.7.3]\n- Bump version to 4.4.7.3\n\n[4.4.7.2]\n- Bump version to 4.4.7.2\n\n[4.4.7.1]\n- Bump version to 4.4.7.1\n\n[4.4.7]\n- Bump version to 4.4.7\n\n[4.4.6.6]\n- Bump version to 4.4.6.6\n\n[4.4.6.5]\n- Bump version to 4.4.6.5\n\n[4.4.6.4]\n- Bump version to 4.4.6.4\n\n[4.4.6.3]\n- Bump version to 4.4.6.3\n\n[4.4.6.2]\n- Bump version to 4.4.6.2\n\n[4.4.6.1]\n- Bump version to 4.4.6.1\n\n[4.4.6]\n- Bump version to 4.4.6\n\n[4.4.5.8]\n- Bump version to 4.4.5.8\n\n[4.4.5.7]\n- Bump version to 4.4.5.7\n\n[4.4.5.6]\n- Bump version to 4.4.5.6\n\n[4.4.5.5]\n- Bump version to 4.4.5.5\n\n[4.4.5.4]\n- Bump version to 4.4.5.4\n\n[4.4.5.3]\n- Bump version to 4.4.5.3\n\n[4.4.5.2]\n- Bump version to 4.4.5.2\n\n[4.4.5.1]\n- Bump version to 4.4.5.1\n\n[4.4.5]\n- Bump version to 4.4.5\n\n[4.4.4.5]\n- Bump version to 4.4.4.5\n\n[4.4.4.4]\n- Bump version to 4.4.4.4\n\n[4.4.4.3]\n- Bump version to 4.4.4.3\n\n[4.4.4.2]\n- Bump version to 4.4.4.2\n\n[4.4.4.1]\n- Bump version to 4.4.4.1\n\n[4.4.4]\n- Bump version to 4.4.4\n\n[4.4.3.11]\n- Bump version to 4.4.3.11\n\n[4.4.3.10]\n- Bump version to 4.4.3.10\n\n[4.4.3.9]\n- Bump version to 4.4.3.9\n\n[4.4.3.8]\n- Bump version to 4.4.3.8\n\n[4.4.3.7]\n- Bump version to 4.4.3.7\n\n[4.4.3.6]\n- Bump version to 4.4.3.6\n\n[4.4.3.5]\n- Bump version to 4.4.3.5\n\n[4.4.3.4]\n- Bump version to 4.4.3.4\n\n[4.4.3.3]\n- Bump version to 4.4.3.3\n\n[4.4.3.2]\n- Bump version to 4.4.3.2\n\n[4.4.3.1]\n- Bump version to 4.4.3.1\n\n[4.4.3]\n- Bump version to 4.4.3\n\n[4.4.2.2]\n- Bump version to 4.4.2.2\n\n[4.4.2.1]\n- Bump version to 4.4.2.1\n\n[4.4.2]\n- Bump version to 4.4.2\n\n[4.4.1.8]\n- Bump version to 4.4.1.8\n\n[4.4.1.7]\n- Bump version to 4.4.1.7\n\n[4.4.1.6]\n- Bump version to 4.4.1.6\n\n[4.4.1.5]\n- Bump version to 4.4.1.5\n\n[4.4.1.4]\n- Bump version to 4.4.1.4\n\n[4.4.1.3]\n- Bump version to 4.4.1.3\n\n[4.4.1.2]\n- Bump version to 4.4.1.2\n\n[4.4.1.1]\n- Bump version to 4.4.1.1\n\n[4.4.1]\n- Bump version to 4.4.1\n\n[4.4.0.3]\n- Bump version to 4.4.0.3\n\n[4.4.0.2]\n- Bump version to 4.4.0.2\n\n[4.4.0.1]\n- Bump version to 4.4.0.1\n\n[4.4.0]\n- Bump version to 4.4.0\n\n[4.3.2.1]\n- Bump version to 4.3.2.1\n\n[4.3.2]\n- Bump version to 4.3.2\n\n[4.3.1.1]\n- Bump version to 4.3.1.1\n\n[4.3.1]\n- Bump version to 4.3.1\n\n[4.3.0.4]\n- Bump version to 4.3.0.4\n\n[4.3.0.3]\n- Bump version to 4.3.0.3\n\n[4.3.0.2]\n- Bump version to 4.3.0.2\n\n[4.3.0.1]\n- Bump version to 4.3.0.1\n\n[4.3.0]\n- Bump version to 4.3.0\n\n[4.2.8.2]\n- Bump version to 4.2.8.2\n\n[4.2.8.1]\n- Bump version to 4.2.8.1\n\n[4.2.8]\n- Bump version to 4.2.8\n\n[4.2.7.3]\n- Bump version to 4.2.7.3\n\n[4.2.7.2]\n- Bump version to 4.2.7.2\n\n[4.2.7.1]\n- Bump version to 4.2.7.1\n\n[4.2.7]\n- Bump version to 4.2.7\n\n[4.2.6.4]\n- Bump version to 4.2.6.4\n\n[4.2.6.3]\n- Bump version to 4.2.6.3\n\n[4.2.6.2]\n- Bump version to 4.2.6.2\n\n[4.2.6.1]\n- Bump version to 4.2.6.1\n\n[4.2.6]\n- Bump version to 4.2.6\n\n[4.2.5.2]\n- Bump version to 4.2.5.2\n\n[4.2.5.1]\n- Bump version to 4.2.5.1\n\n[4.2.5]\n- Bump version to 4.2.5\n\n[4.2.4.5]\n- Bump version to 4.2.4.5\n\n[4.2.4.4]\n- Bump version to 4.2.4.4\n\n[4.2.4.3]\n- Bump version to 4.2.4.3\n\n[4.2.4.2]\n- Bump version to 4.2.4.2\n\n[4.2.4.1]\n- Bump version to 4.2.4.1\n\n[4.2.4]\n- Bump version to 4.2.4\n\n[4.2.3.3]\n- Bump version to 4.2.3.3\n\n[4.2.3.2]\n- Bump version to 4.2.3.2\n\n[4.2.3.1]\n- Bump version to 4.2.3.1\n\n[4.2.3]\n- Bump version to 4.2.3\n\n[4.2.2.6]\n- Bump version to 4.2.2.6\n\n[4.2.2.5]\n- Bump version to 4.2.2.5\n\n[4.2.2.4]\n- Bump version to 4.2.2.4\n\n[4.2.2.3]\n- Bump version to 4.2.2.3\n\n[4.2.2.2]\n- Bump version to 4.2.2.2\n\n[4.2.2.1]\n- Bump version to 4.2.2.1\n\n[4.2.2]\n- Bump version to 4.2.2\n\n[4.2.1.4]\n- Bump version to 4.2.1.4\n\n[4.2.1.3]\n- Bump version to 4.2.1.3\n\n[4.2.1.2]\n- Bump version to 4.2.1.2\n\n[4.2.1.1]\n- Bump version to 4.2.1.1\n\n[4.2.1]\n- Bump version to 4.2.1\n\n[4.2.0.2]\n- Bump version to 4.2.0.2\n\n[4.2.0.1]\n- Bump version to 4.2.0.1\n\n[4.2.0]\n- Bump version to 4.2.0\n\n[4.1.0]\n- Add dependency for ovirt-engine-dashboard.\n- Bump version to 4.1.0\n\n[4.0.0]\n- Bump version to 4.0.0\n- Dropped Fedora  22 and EL  7 support\n\n[3.6.0]\n- Update dependencies and removed legacy provides / requires\n\n[3.3.0-1]\n- Bump version to 3.3.0\n\n[3.2.0-1]\n- Bump version to 3.2.0\n\n[3.1.0-3]\n- Removed image uploader, iso uploader, and log collector from this\n  git repo.  The are now in their own respective ovirt.org git\n  repos. BZ#803240.\n\n[3.1.0-2]\n- The ovirt-engine spec file did not previously contain a BuildRequires\n  statement for the maven package. As a result in mock environments the\n  build failed with an error when attempting to call the 'mvn' binary -\n  BZ#807761.\n\n[3.1.0-1]\n- Adjust code for Jboss AS 7.1\n\n[3.1.0-1]\n- Moved all hard coded paths to macros\n\n[3.1.0-1]\n- Initial build\n- Cloned from RHEVM spec file","id":"ELSA-2024-12701","ovalId":"oval:com.oracle.elsa:def:202412701","source":"oracle_linux","title":"ELSA-2024-12701: ovirt-engine security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2024-12701.html"}