Skip to content
OpenAdvisories
Unscored RHSA-2014:0469 11 CVEs

Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme 0:5.2.3.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-appliance 0:5.2.3.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-debuginfo 0:5.2.3.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 cfme-lib 0:5.2.3.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 mingw32-cfme-host 0:5.2.3.2-1.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-contrib 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-debuginfo 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-devel 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-docs 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-libs 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-plperl 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-plpython 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-pltcl 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-server 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-test 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 postgresql92-postgresql-upgrade 0:9.2.7-1.1.el6
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 prince 0:9.0r2-4.el6cf
Red Hat · CloudForms 5 cloudforms_managementengine:5::el6 ruby193-rubygem-actionpack 1:3.2.13-6.el6cf

Vulnerabilities 11

  • Medium —
    CVE-2013-6417

    actionpack allows bypass of database-query restrictions

    actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to b…

    actionpack RubyGems
  • Unscored —
    CVE-2014-0060

    PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0061

    The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x befo…

    postgresql-9.3 postgresql-9.1 postgresql-plsh Debian Ubuntu
  • Unscored —
    CVE-2014-0062

    Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x befo…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0063

    Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x befo…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0064

    Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0065

    Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, an…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0066

    The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0078

    The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users t…

  • Unscored —
    CVE-2014-0137

    SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management …

  • Unscored —
    CVE-2014-2669

    Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x …

    postgresql-9.1 Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1082154
  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/site/documentation/en-US/CloudForms/3.0/html/Management_Engine_5.2_Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1036409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1064556
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065219
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065226
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1076688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065236
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0469.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6417
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6417
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6417
  • report
    https://access.redhat.com/security/cve/CVE-2014-0060
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0060
  • report
    https://access.redhat.com/security/cve/CVE-2014-0061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0061
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0061
  • report
    https://access.redhat.com/security/cve/CVE-2014-0062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0062
  • report
    https://access.redhat.com/security/cve/CVE-2014-0063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0063
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0063
  • report
    https://access.redhat.com/security/cve/CVE-2014-0064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0064
  • report
    https://access.redhat.com/security/cve/CVE-2014-0065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0065
  • report
    https://access.redhat.com/security/cve/CVE-2014-0066
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0066
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0066
  • report
    https://access.redhat.com/security/cve/CVE-2014-0078