Red Hat Security Advisory: CloudForms 5.0.6 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-16782US | medium5.9 | — | ||
There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notesexternal
- https://access.redhat.com/errata/RHSA-2020:2480self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1529718external
- 1718846external
- 1719266external
- 1740405external
- 1746211external
Behebungen (34)
- Behobenansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenansible-runner-0:1.4.6-1.el8ar.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-amazon-smartstate-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-amazon-smartstate-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-appliance-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-appliance-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-appliance-common-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-appliance-tools-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-gemset-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobencfme-gemset-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenlibssh2-0:1.9.0-2.el8cf.src as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenlibssh2-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenlibssh2-debuginfo-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenlibssh2-debugsource-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Behobenpython3-ansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2480 - Workaroundansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundansible-runner-0:1.4.6-1.el8ar.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-amazon-smartstate-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-common-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-appliance-tools-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-gemset-0:5.11.6.0-1.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundcfme-gemset-0:5.11.6.0-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-0:1.9.0-2.el8cf.src as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-debuginfo-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundlibssh2-debugsource-0:1.9.0-2.el8cf.x86_64 as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
- Workaroundpython3-ansible-runner-0:1.4.6-1.el8ar.noarch as a component of CloudForms Management Engine 5.11
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan