Skip to content
OpenAdvisories
Medium RHSA-2017:1367 2 CVEs

Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Fixed packages 130

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible 0:2.2.1.0-2.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-server 0:3.1.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 ansible-tower-setup 0:3.1.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 bubblewrap 0:0.1.7-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 bubblewrap-debuginfo 0:0.1.7-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme 0:5.8.0.17-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance 0:5.8.0.17-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-appliance-debuginfo 0:5.8.0.17-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-debuginfo 0:5.8.0.17-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 cfme-gemset 0:5.8.0.17-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 erlang 0:19.0.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 erlang-debuginfo 0:19.0.4-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi-bmc-watchdog 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi-debuginfo 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi-devel 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi-ipmidetectd 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 freeipmi-ipmiseld 0:1.5.1-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 google-compute-engine 0:2.0.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 google-config 0:2.0.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtomcrypt 0:1.17-23.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtomcrypt-debuginfo 0:1.17-23.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtomcrypt-devel 0:1.17-23.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtomcrypt-doc 0:1.17-23.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtommath 0:0.42.0-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtommath-debuginfo 0:0.42.0-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtommath-devel 0:0.42.0-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 libtommath-doc 0:0.42.0-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-all-modules 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-debuginfo 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-filesystem 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-http-geoip 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-http-image-filter 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-http-perl 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-http-xslt-filter 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-mail 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 nginx-mod-stream 1:1.10.2-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-contrib 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-debuginfo 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-devel 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-docs 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-libs 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-plperl 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-plpython 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-pltcl 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-server 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 postgresql94-test 0:9.4.11-2PGDG.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 prince 0:9.0r2-10.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-crypto 0:2.6.1-7.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-crypto-debuginfo 0:2.6.1-7.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-ecdsa 0:0.11-4.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-httplib2 0:0.9.1-2.1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-keyczar 0:0.71c-2.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-meld3 0:0.6.10-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-meld3-debuginfo 0:0.6.10-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-paramiko 0:1.15.2-3.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-paramiko-doc 0:1.15.2-3.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 python-passlib 0:1.6.5-1.1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rabbitmq-server 0:3.6.5-1.el7at
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-postgresql-pglogical 0:1.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-postgresql-pglogical-debuginfo 0:1.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-repmgr 0:3.1.3-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-postgresql95-repmgr-debuginfo 0:3.1.3-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-bcrypt 0:3.1.10-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-bcrypt-debuginfo 0:3.1.10-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-bcrypt-doc 0:3.1.10-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-eventmachine 0:1.0.7-6.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-eventmachine-debuginfo 0:1.0.7-6.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-eventmachine-doc 0:1.0.7-6.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ffi 0:1.9.8-4.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ffi-debuginfo 0:1.9.8-4.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ffi-doc 0:1.9.8-4.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-hamlit 0:2.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-hamlit-debuginfo 0:2.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-hamlit-doc 0:2.7.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-http_parser.rb 0:0.6.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-http_parser.rb-debuginfo 0:0.6.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-http_parser.rb-doc 0:0.6.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-json 0:2.0.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-json-debuginfo 0:2.0.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-json-doc 0:2.0.2-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-linux_block_device 0:0.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-linux_block_device-debuginfo 0:0.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-linux_block_device-doc 0:0.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-memory_buffer 0:0.1.0-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-memory_buffer-debuginfo 0:0.1.0-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-memory_buffer-doc 0:0.1.0-2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-net_app_manageability 0:0.1.0-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-net_app_manageability-debuginfo 0:0.1.0-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-net_app_manageability-doc 0:0.1.0-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nio4r 0:1.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nio4r-debuginfo 0:1.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nio4r-doc 0:1.2.1-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri 0:1.6.8-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-debuginfo 0:1.6.8-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-nokogiri-doc 0:1.6.8-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ovirt-engine-sdk4 0:4.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ovirt-engine-sdk4-debuginfo 0:4.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-ovirt-engine-sdk4-doc 0:4.1.5-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-pg 0:0.18.2-5.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-pg-debuginfo 0:0.18.2-5.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-pg-doc 0:0.18.2-5.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-pkg-config 0:1.1.7-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-pkg-config-doc 0:1.1.7-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-puma 0:3.3.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-puma-debuginfo 0:3.3.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-puma-doc 0:3.3.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-redhat_access_cfme 0:1.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-redhat_access_cfme-doc 0:1.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-redhat_access_lib 0:0.1.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-rugged 0:0.25.0-b10.2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-rugged-debuginfo 0:0.25.0-b10.2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-rugged-doc 0:0.25.0-b10.2.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-thin 0:1.7.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-thin-debuginfo 0:1.7.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-thin-doc 0:1.7.0-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-unf_ext 0:0.0.7.1-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-unf_ext-debuginfo 0:0.0.7.1-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-unf_ext-doc 0:0.0.7.1-3.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-websocket-driver 0:0.6.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-websocket-driver-debuginfo 0:0.6.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 rh-ruby23-rubygem-websocket-driver-doc 0:0.6.3-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 smem 0:1.4-1.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 sshpass 0:1.06-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 sshpass-debuginfo 0:1.06-1.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 supervisor 0:3.1.3-3.el7
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 wmi 0:1.3.14-7.el7cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.8::el7 wmi-debuginfo 0:1.3.14-7.el7cf

Vulnerabilities 2

  • Medium 6.5

    It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when u…

  • Unscored —

    CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.5/html/release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1226456
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298675
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1321616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1324610
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1342790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1348239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1361720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1365253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1373850
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1375737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1375740
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1379843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380728
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1381712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1382714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1382724
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1383307
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1383611
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384122
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384154
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1386327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1386843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388411
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1389068
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392391
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392822
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393294
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393820
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393832
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1394249