RHSA-2014:0148Medium

Red Hat Security Advisory: spacewalk-java, spacewalk-web and satellite-branding security update

Published
February 10, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (4)

CVE-2012-6149 →CVE-2013-1869 →CVE-2013-1871 →CVE-2013-4415 →

📋 Description

CVE-2012-6149 — (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content CVE-2013-1869 — Satellite/Spacewalk: header injection flaw CVE-2013-1871 — Satellite/Spacewalk: XSS in EditAddress page CVE-2013-4415 — Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS)

🎯 Affected products46

  • Red Hat Satellite 5.6 (RHEL v.5)
  • Red Hat Satellite 5.6 (RHEL v.6)
  • Red Hat Satellite Managed DB 5.6 (RHEL v.5)
  • Red Hat Satellite Managed DB 5.6 (RHEL v.6)
  • satellite-branding-0:5.6.0.23-1.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • satellite-branding-0:5.6.0.23-1.el5sat.src as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • satellite-branding-0:5.6.0.23-1.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • satellite-branding-0:5.6.0.23-1.el6sat.src as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-base-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-base-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-base-minimal-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-base-minimal-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite Managed DB 5.6 (RHEL v.5)
  • spacewalk-base-minimal-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-base-minimal-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.6 (RHEL v.6)
  • spacewalk-base-minimal-config-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-base-minimal-config-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-dobby-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-dobby-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite Managed DB 5.6 (RHEL v.5)
  • spacewalk-dobby-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-dobby-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.6 (RHEL v.6)
  • spacewalk-grail-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-grail-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-html-0:2.0.3-19.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-html-0:2.0.3-19.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-java-0:2.0.2-58.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-java-0:2.0.2-58.el5sat.src as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-java-0:2.0.2-58.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-java-0:2.0.2-58.el6sat.src as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • spacewalk-java-config-0:2.0.2-58.el5sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.5)
  • spacewalk-java-config-0:2.0.2-58.el6sat.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • +16 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 Run the following command to restart the Red Hat Satellite server: # rhn-satellite restart

🔗 References (7)