Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Red Hat Satellite Proxy: RHSA-2019-1663-01 Important: Spacewalk Update

red hat
Calendar Grey July 2, 2019
Dist Redhat Esm H88
A crucial announcement regarding Red Hat Satellite Proxy includes security enhancements for spacewalk-backend and spacewalk-proxy components.
An update for spacewalk-backend and spacewalk-proxy is now available for Red Hat Satellite Proxy v 5.8

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

Spacewalk is an Open Source systems management solution that provides system provisioning, configuration and patching capabilities.
Security Fix(es):
* spacewalk-proxy: Path traversal in proxy authentication cache (CVE-2019-10137)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat important update path traversal spacewalk proxy security auth cache

References

https://access.redhat.com/security/cve/CVE-2019-10137 https://access.redhat.com/security/updates/classification/#important

Package List

Red Hat Satellite Proxy 5.8 (RHEL v.6):
Source: spacewalk-backend-2.5.3-177.el6sat.src.rpm spacewalk-proxy-2.5.0-8.el6sat.src.rpm
noarch: spacewalk-backend-2.5.3-177.el6sat.noarch.rpm spacewalk-backend-libs-2.5.3-177.el6sat.noarch.rpm spacewalk-proxy-broker-2.5.0-8.el6sat.noarch.rpm spacewalk-proxy-common-2.5.0-8.el6sat.noarch.rpm spacewalk-proxy-management-2.5.0-8.el6sat.noarch.rpm spacewalk-proxy-package-manager-2.5.0-8.el6sat.noarch.rpm spacewalk-proxy-redirect-2.5.0-8.el6sat.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2019:1663-01
Product: Red Hat Satellite Proxy
Advisory URL: https://access.redhat.com/errata/RHSA-2019:1663
Issue date: 2019-07-02

Topic

An update for spacewalk-backend and spacewalk-proxy is now available forRed Hat Satellite Proxy v 5.8.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat important update path traversal spacewalk proxy security auth cache

Relevant Releases Architectures

Red Hat Satellite Proxy 5.8 (RHEL v.6) - noarch

Bugs Fixed

1702604 - CVE-2019-10137 spacewalk-proxy: Path traversal in proxy authentication cache

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.