Skip to content
OpenAdvisories
Medium RHSA-2020:2480 1 CVE

Red Hat Security Advisory: CloudForms 5.0.6 security, bug fix and enhancement update

Published Sep 18, 2024 · Updated Mar 20, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 ansible-runner 0:1.4.6-1.el8ar
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-amazon-smartstate 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance-common 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-appliance-tools 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 cfme-gemset 0:5.11.6.0-1.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 libssh2 0:1.9.0-2.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 libssh2-debuginfo 0:1.9.0-2.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 libssh2-debugsource 0:1.9.0-2.el8cf
Red Hat · CloudForms 5 cloudforms_managementengine:5.11::el8 python3-ansible-runner 0:1.4.6-1.el8ar

Vulnerabilities 1

  • Medium 6.3
    CVE-2019-16782

    Possible Information Leak / Session Hijack Vulnerability in Rack

    There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session …

    rack rack rack ruby-rack Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1529718
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1718846
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1719266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1740405
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1746211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1746860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1760001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1789100
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1805847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810406
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1815479
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1818172
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1819998
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1821842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1824355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1824846
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1827127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1833362
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1835911
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1837410
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2480.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-16782
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-16782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-16782
  • article
    https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3