Skip to content
OpenAdvisories
Unscored RHSA-2013:0995 2 CVEs

Red Hat Security Advisory: Foreman security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 ruby193-foreman 0:1.1.10009-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-foreman-mysql 0:1.1.10009-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-foreman-proxy 0:1.1.10001-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-openstack-foreman-installer 0:0.0.18-1.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-openstack-foreman-installer-debuginfo 0:0.0.18-1.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-ancestry 0:1.3.0-5.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-ancestry-doc 0:1.3.0-5.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-fog 0:1.10.1-11.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-fog-doc 0:1.10.1-11.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-mysql 0:2.8.1-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-mysql-debuginfo 0:2.8.1-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-safemode 0:1.2.0-9.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-rubygem-safemode-doc 0:1.2.0-9.el6ost

Vulnerabilities 2

  • Unscored —
    CVE-2013-2113 Public exploit EPSS 21%

    The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users …

  • Unscored —
    CVE-2013-2121 Public exploit EPSS 25%

    Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=966804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=968166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=969531
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=971545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=972780
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975068
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=976907
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0995.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2113
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2113
  • report
    https://access.redhat.com/security/cve/CVE-2013-2121
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2121
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2121