(RHSA-2019:0212) Moderate: CloudForms 4.7 security, bug fix and enhancement update

2019-02-0722:50:40

access.redhat.com

162

0.002 Low

EPSS

Percentile

59.1%

JSON

Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller (MVC) framework for web application development. Action Pack implements the controller and the view components.

Security Fix(es):

rubygem-sinatra: XSS in the 400 Bad Request page (CVE-2018-11627)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

This update fixes various bugs and adds enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64erlang-typer< 19.3.6.7-1.el7aterlang-typer-19.3.6.7-1.el7at.x86_64.rpm
RedHat7x86_64erlang-cosnotification< 19.3.6.7-1.el7aterlang-cosNotification-19.3.6.7-1.el7at.x86_64.rpm
RedHat7x86_64bubblewrap-debuginfo< 0.1.7-1.el7bubblewrap-debuginfo-0.1.7-1.el7.x86_64.rpm
RedHat7x86_64erlang-et< 19.3.6.7-1.el7aterlang-et-19.3.6.7-1.el7at.x86_64.rpm
RedHat7x86_64nginx-mod-http-perl< 1.10.2-1.el7atnginx-mod-http-perl-1.10.2-1.el7at.x86_64.rpm
RedHat7noarchpython2-bambou< 3.0.1-2.el7cfpython2-bambou-3.0.1-2.el7cf.noarch.rpm
RedHat7x86_64dumb-init< 1.2.0-1.el7cfdumb-init-1.2.0-1.el7cf.x86_64.rpm
RedHat7x86_64rubygem-pg< 0.18.4-2.el7cfrubygem-pg-0.18.4-2.el7cf.x86_64.rpm
RedHat7x86_64qpid-proton-cpp-devel< 0.19.0-1.el7cfqpid-proton-cpp-devel-0.19.0-1.el7cf.x86_64.rpm
RedHat7x86_64erlang-tools< 19.3.6.7-1.el7aterlang-tools-19.3.6.7-1.el7at.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	erlang-typer	< 19.3.6.7-1.el7at	erlang-typer-19.3.6.7-1.el7at.x86_64.rpm
RedHat	7	x86_64	erlang-cosnotification	< 19.3.6.7-1.el7at	erlang-cosNotification-19.3.6.7-1.el7at.x86_64.rpm
RedHat	7	x86_64	bubblewrap-debuginfo	< 0.1.7-1.el7	bubblewrap-debuginfo-0.1.7-1.el7.x86_64.rpm
RedHat	7	x86_64	erlang-et	< 19.3.6.7-1.el7at	erlang-et-19.3.6.7-1.el7at.x86_64.rpm
RedHat	7	x86_64	nginx-mod-http-perl	< 1.10.2-1.el7at	nginx-mod-http-perl-1.10.2-1.el7at.x86_64.rpm
RedHat	7	noarch	python2-bambou	< 3.0.1-2.el7cf	python2-bambou-3.0.1-2.el7cf.noarch.rpm
RedHat	7	x86_64	dumb-init	< 1.2.0-1.el7cf	dumb-init-1.2.0-1.el7cf.x86_64.rpm
RedHat	7	x86_64	rubygem-pg	< 0.18.4-2.el7cf	rubygem-pg-0.18.4-2.el7cf.x86_64.rpm
RedHat	7	x86_64	qpid-proton-cpp-devel	< 0.19.0-1.el7cf	qpid-proton-cpp-devel-0.19.0-1.el7cf.x86_64.rpm
RedHat	7	x86_64	erlang-tools	< 19.3.6.7-1.el7at	erlang-tools-19.3.6.7-1.el7at.x86_64.rpm