[Users] oVirt Engine 3.2 Async Update due to security issue

Mike Burns mburns at redhat.com
Thu Sep 12 16:27:13 UTC 2013


A new version of oVirt Engine 3.2 was released today to deal with 
security bug 1007482 [1].

A reflected cross-site scripting (XSS) flaw was found in oVirt Engine An 
attacker could construct a carefully-crafted URL, which once visited by 
an unsuspecting user, could cause the user's web browser to execute 
malicious script in the context the of oVirt Engine domain. (CVE-2013-4181)

This update only fixes this one bug.

Thanks

The oVirt Team


[1] https://bugzilla.redhat.com/show_bug.cgi?id=1007482



More information about the Users mailing list