Red Hat Security Advisory: CloudForms 5.0.6 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-16782US | medium5.9 | — | ||
There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notesexternal
- https://access.redhat.com/errata/RHSA-2020:2480self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1529718external
- 1718846external
- 1719266external
- 1740405external
- 1746211external
remediations (34)
- Fixedansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedansible-runner-0:1.4.6-1.el8ar.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-appliance-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-appliance-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-appliance-common-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-appliance-tools-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-gemset-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedcfme-gemset-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedlibssh2-0:1.9.0-2.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedlibssh2-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedlibssh2-debuginfo-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedlibssh2-debugsource-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Fixedpython3-ansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Workaroundansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundansible-runner-0:1.4.6-1.el8ar.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-common-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-tools-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-gemset-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-gemset-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-0:1.9.0-2.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-debuginfo-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-debugsource-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundpython3-ansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan