Skip to content
OpenAdvisories
Critical RHBA-2015:1100 5 CVEs

Red Hat Bug Fix Advisory: CFME 5.4.0 bug fixes, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme 0:5.4.0.5-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-appliance 0:5.4.0.5-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-debuginfo 0:5.4.0.5-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-gemset 0:5.4.0.5-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-lib 0:5.4.0.5-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-vnc-plugin 0:1.0.0-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-vnc-plugin-debuginfo 0:1.0.0-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 libdnet 0:1.12-11.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 libdnet-debuginfo 0:1.12-11.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 libdnet-devel 0:1.12-11.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 libdnet-progs 0:1.12-11.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 lshw 0:B.02.16-4.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 lshw-debuginfo 0:B.02.16-4.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 lshw-gui 0:B.02.16-4.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 netapp-manageability-sdk 0:4.0P1-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 netapp-manageability-sdk-devel 0:4.0P1-3.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 open-vm-tools 0:9.2.3-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 open-vm-tools-debuginfo 0:9.2.3-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 open-vm-tools-desktop 0:9.2.3-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 open-vm-tools-devel 0:9.2.3-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 prince 0:9.0r2-4.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 pyliblzma 0:0.5.3-7.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 pyliblzma-debuginfo 0:0.5.3-7.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-bcrypt-ruby 0:3.0.1-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-bcrypt-ruby-debuginfo 0:3.0.1-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-eventmachine 0:1.0.7-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-eventmachine-debuginfo 0:1.0.7-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-ffi 0:1.9.8-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-ffi-debuginfo 0:1.9.8-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-io-extra 0:1.2.8-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-io-extra-debuginfo 0:1.2.8-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-json 0:1.8.2-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-json-debuginfo 0:1.8.2-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-nokogiri 0:1.5.11-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-nokogiri-debuginfo 0:1.5.11-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-pg 0:0.12.2-9.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-pg-debuginfo 0:0.12.2-9.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-psych 0:2.0.13-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-psych-debuginfo 0:2.0.13-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-qpid_messaging 0:0.20.2-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-qpid_messaging-debuginfo 0:0.20.2-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-therubyracer 0:0.11.0-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-therubyracer-debuginfo 0:0.11.0-5.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-thin 0:1.3.1-9.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby200-rubygem-thin-debuginfo 0:1.3.1-9.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 sneakernet_ca 0:0.1-2.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 wmi 0:1.3.14-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 wmi-debuginfo 0:1.3.14-1.el6cf

Vulnerabilities 5

  • Critical 9.8
    CVE-2015-1820

    rest-client Gem Vulnerable to Session Fixation

    REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

    rest-client ruby-rest-client Debian RubyGems
  • Medium —
    CVE-2013-4389

    actionmailer email address processing causes Denial of service

    Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled d…

    actionmailer RubyGems
  • Medium —
    CVE-2013-4492

    i18n gem Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

    ruby-i18n ruby-i18n i18n Debian Ubuntu RubyGems
  • Medium —
    CVE-2014-7819

    sprockets vulnerable to Path Traversal

    Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10…

    sprockets ruby-sprockets Debian RubyGems
  • Low —
    CVE-2015-3448

    rest-client allows local users to obtain sensitive information by reading the log

    REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

    rest-client ruby-rest-client Debian RubyGems

References

  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_CloudForms/3.2/html/Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1146178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1160890
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163469
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163952
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163978
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1164033
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1164386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1164764
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166328
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166861
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1167110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1167308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1167410
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1168337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1168345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169502
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169930
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1170319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1170358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1170813
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171286
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171577