Skip to content
OpenAdvisories
Low RHSA-2017:2645 1 CVE

Red Hat Security Advisory: satellite and spacewalk security and bug fix update

Published Sep 16, 2024 · Updated Jul 28, 2026

Fixed packages 26

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.8::el6 satellite-schema 0:5.8.0.33-1.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-app 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-applet 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-cdn 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-config-files 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-config-files-common 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-config-files-tool 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-iss 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-iss-export 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-libs 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-package-push-server 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-server 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-sql 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-sql-oracle 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-sql-postgresql 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-tools 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-xml-export-libs 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-backend-xmlrpc 0:2.5.3-151.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-java 0:2.5.14-95.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-java-config 0:2.5.14-95.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-java-lib 0:2.5.14-95.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-java-oracle 0:2.5.14-95.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-java-postgresql 0:2.5.14-95.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-schema 0:2.5.1-50.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 spacewalk-taskomatic 0:2.5.14-95.el6sat

Vulnerabilities 1

  • Low 3.5

    A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/articles/273633
  • article
    https://access.redhat.com/site/articles/11258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1446271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1455887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458722
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1460208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466229
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1467632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1475067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477667
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2645.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7538
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7538
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7538