RHBA-2018:1330 - Bug Fix Advisory

Topic

CloudForms 4.6 Amazon EC2 SmartState Client​ is used by CloudForms directly to execute the deep inspection of cloud instances.​

Description

CloudForms is a management and automation platform for virtual, private, and hybrid cloud infrastructures. This image provides support for Amazon EC2 Smart State Analysis.

Solution

This container would not be used alone or outside of CloudForms automatically launching for its own purposes as a utility.

Affected Products

• Red Hat CloudForms 4.6 x86_64

Fixes

• BZ - 1561071 - Wrong user for AWS smart state analysis
• BZ - 1573667 - cfme-amazon-smartstate tracker bug for 5.9.2

CVEs

• CVE-2014-9402
• CVE-2015-5180
• CVE-2017-3736
• CVE-2017-3737
• CVE-2017-3738
• CVE-2017-11671
• CVE-2017-12132
• CVE-2017-15670
• CVE-2017-15804
• CVE-2018-1101
• CVE-2018-1104
• CVE-2018-7750
• CVE-2018-1000001

References

(none)