RHEA-2013:1487High

Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update

Published
October 31, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2013-0185 →CVE-2013-1899 →CVE-2013-1900 →CVE-2013-1901 →CVE-2013-2049 →CVE-2013-2050 →CVE-2013-4172 →CVE-2013-4423 →

📋 Description

CVE-2013-0185 — EVM: CSRF CVE-2013-1899 — postgresql: Insecure switch parsing CVE-2013-1900 — postgresql: Improper randomization of pgcrypto functions (requiring random seed) CVE-2013-1901 — postgresql: Improper user privilege check for on-line backups CVE-2013-2049 — 2: static secret_token.rb value CVE-2013-2050 — 2: miq_policy/explorer SQL injection CVE-2013-4172 — interface: Ruby code injection CVE-2013-4423 — CloudForms: user password stored in recoverable format

🎯 Affected products200

  • Management Engine
  • cfme-0:5.2.0.37-1.el6cf.src as a component of Management Engine
  • cfme-0:5.2.0.37-1.el6cf.x86_64 as a component of Management Engine
  • cfme-appliance-0:5.2.0.37-1.el6cf.x86_64 as a component of Management Engine
  • cfme-debuginfo-0:5.2.0.37-1.el6cf.x86_64 as a component of Management Engine
  • cfme-lib-0:5.2.0.37-1.el6cf.x86_64 as a component of Management Engine
  • cfme-vnc-plugin-0:1.0.0-2.el6cf.src as a component of Management Engine
  • cfme-vnc-plugin-0:1.0.0-2.el6cf.x86_64 as a component of Management Engine
  • cfme-vnc-plugin-debuginfo-0:1.0.0-2.el6cf.x86_64 as a component of Management Engine
  • libdnet-0:1.12-11.el6cf.src as a component of Management Engine
  • libdnet-0:1.12-11.el6cf.x86_64 as a component of Management Engine
  • libdnet-debuginfo-0:1.12-11.el6cf.x86_64 as a component of Management Engine
  • libdnet-devel-0:1.12-11.el6cf.x86_64 as a component of Management Engine
  • libdnet-progs-0:1.12-11.el6cf.x86_64 as a component of Management Engine
  • lshw-0:B.02.16-4.el6cf.src as a component of Management Engine
  • lshw-0:B.02.16-4.el6cf.x86_64 as a component of Management Engine
  • lshw-debuginfo-0:B.02.16-4.el6cf.x86_64 as a component of Management Engine
  • lshw-gui-0:B.02.16-4.el6cf.x86_64 as a component of Management Engine
  • mingw32-cfme-host-0:5.2.0.37-1.el6cf.x86_64 as a component of Management Engine
  • netapp-manageability-sdk-0:4.0P1-3.el6cf.src as a component of Management Engine
  • netapp-manageability-sdk-0:4.0P1-3.el6cf.x86_64 as a component of Management Engine
  • netapp-manageability-sdk-devel-0:4.0P1-3.el6cf.x86_64 as a component of Management Engine
  • open-vm-tools-0:9.2.3-5.el6cf.src as a component of Management Engine
  • open-vm-tools-0:9.2.3-5.el6cf.x86_64 as a component of Management Engine
  • open-vm-tools-debuginfo-0:9.2.3-5.el6cf.x86_64 as a component of Management Engine
  • open-vm-tools-desktop-0:9.2.3-5.el6cf.x86_64 as a component of Management Engine
  • open-vm-tools-devel-0:9.2.3-5.el6cf.x86_64 as a component of Management Engine
  • postgresql92-0:1-12.el6.src as a component of Management Engine
  • postgresql92-0:1-12.el6.x86_64 as a component of Management Engine
  • postgresql92-build-0:1-12.el6.x86_64 as a component of Management Engine
  • +170 more not shown

✅ Remediation

This update fixes several bugs and adds multiple enhancements. Documentation for these changes will be available shortly from the Red Hat CloudForms 3.0 Management Engine 5.2 Technical Notes, linked in the References. All users of Red Hat CloudForms are advised to apply this update, which fixes the bugs and adds the enhancements noted in the Technical Notes. Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

🔗 References (4)