Synopsis

Low: Red Hat Network Satellite spacewalk-backend security and bug fix update

Type/Severity

Security Advisory: Low

Topic

Updated spacewalk-backend packages that fix one security issue and two bugs
are now available for Red Hat Network Satellite 5.4.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Red Hat Network (RHN) Satellite is a systems management tool for
Linux-based infrastructures. It allows for provisioning, monitoring, and
remote management of multiple Linux deployments with a single, centralized
tool.

If a user submitted a system registration XML-RPC call to an RHN Satellite
server (for example, by running "rhnreg_ks") and that call failed, their
RHN user password was included in plain text in the error messages both
stored in the server log and mailed to the server administrator. With this
update, user passwords are excluded from these error messages to avoid the
exposure of authentication credentials. (CVE-2012-0059)

This update also fixes the following bugs:

• When activating a new RHN Satellite certificate that has less
  entitlements than is currently used or allotted on the Satellite server,
  the error message notified the user only about the first problem
  encountered and did not include directions for resolution. With this
  update, more verbose error messages are shown in this scenario. (BZ#209514,
  BZ#704623)
  

All users of Red Hat Network Satellite are advised to upgrade to these
updated packages, which correct these issues. For this update to take
effect, Red Hat Network Satellite must be restarted. Refer to the Solution
section for details.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Run the following command to restart the Red Hat Network Satellite
server:

# rhn-satellite restart

Affected Products

• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 6 x86_64
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 6 s390x
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5 x86_64
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5 s390x
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5 i386

Fixes

• BZ - 749890 - Mask passwords from xmlrpc tracebacks
• BZ - 782819 - CVE-2012-0059 Satellite, Spacewalk: RHN user password disclosure upon failed system registration

CVEs

• CVE-2012-0059

References

• https://access.redhat.com/security/updates/classification/#low

Red Hat Satellite with Embedded Oracle 5.4 for RHEL 6

SRPM
spacewalk-backend-1.2.13-66.el6sat.src.rpm	SHA-256: 9a79f020c2462bb7029aeebedc70ca57f932f26d97d6bd0afdfbba82e6ee743c
x86_64
spacewalk-backend-1.2.13-66.el6sat.noarch.rpm	SHA-256: b9f461c78820d758d46aa9454a30f6b07e413183218ea2ea8e333840413e9bd5
spacewalk-backend-app-1.2.13-66.el6sat.noarch.rpm	SHA-256: 10ade601c261415a582d5ced4b46930b53ff370fbf11027aa6f2be893f8fc9a5
spacewalk-backend-applet-1.2.13-66.el6sat.noarch.rpm	SHA-256: 68b2f16c7fc31f11ed387545c0f205779ab32ad1777a833fcfb5c0afb6507b80
spacewalk-backend-config-files-1.2.13-66.el6sat.noarch.rpm	SHA-256: c5d6986e87309146d915954a08b3d625dbe8fd263c214eef31cd07d08cfc4bef
spacewalk-backend-config-files-common-1.2.13-66.el6sat.noarch.rpm	SHA-256: 99c18afadb3cd82ace0b1817ab34e98764fb4d86290676cc923045457c613a73
spacewalk-backend-config-files-tool-1.2.13-66.el6sat.noarch.rpm	SHA-256: 7d6cca2c958d10c81682f5ba2c53de2f39f238da074eda12ef01887608011b4e
spacewalk-backend-iss-1.2.13-66.el6sat.noarch.rpm	SHA-256: 0b53b4bf2686e74428722885f230cdfe4324639d3185457154a8da475ece84f0
spacewalk-backend-iss-export-1.2.13-66.el6sat.noarch.rpm	SHA-256: 926415c9ee54b3a56820ebd6abf71c23ac2df490d3c9f017a678395654a4f285
spacewalk-backend-libs-1.2.13-66.el6sat.noarch.rpm	SHA-256: 4d1ef8849a2269e84dea83a23b11347c73002ad5d3a3524474c15f090e8e6768
spacewalk-backend-package-push-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: bc6af52949e19b517206bcf58bab1b6fe4a6843c925d12b88cc63588722d542c
spacewalk-backend-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: e3e57e6a42115f07ee75e03adb159b111f7aed453805c322c88aa09bbd320fae
spacewalk-backend-sql-1.2.13-66.el6sat.noarch.rpm	SHA-256: 62441e65f1c1f6bba48a424b5b5212e286c456a2b61527820945610cb5793c95
spacewalk-backend-sql-oracle-1.2.13-66.el6sat.noarch.rpm	SHA-256: 3a75c9f32d6277355defd5798998b6cb4004477fba347fb3cf6de1ba0e9e36d5
spacewalk-backend-tools-1.2.13-66.el6sat.noarch.rpm	SHA-256: 474a9e05b5d7389bb6388ebbd1acb93be2b337379a5082bccdd0bab4c81b0bf0
spacewalk-backend-upload-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: c1e225aa1e1124ddb1a0ef061b067e9bc593d75737caaf5c331aa982f3d791e6
spacewalk-backend-xml-export-libs-1.2.13-66.el6sat.noarch.rpm	SHA-256: 9dec6a3cd959a6292f7491efdecdd4e1a5c4ce11897e88781d88bcc870e52672
spacewalk-backend-xmlrpc-1.2.13-66.el6sat.noarch.rpm	SHA-256: aba1036d9ff9bc38307ca006bce148c831c480b9cfb75230684c56356b3f9c38
spacewalk-backend-xp-1.2.13-66.el6sat.noarch.rpm	SHA-256: 3a0d3647fbc922ddf24846616be2d8c7baa2a65bc2315e8b27fee737f41d5168
s390x
spacewalk-backend-1.2.13-66.el6sat.noarch.rpm	SHA-256: b9f461c78820d758d46aa9454a30f6b07e413183218ea2ea8e333840413e9bd5
spacewalk-backend-app-1.2.13-66.el6sat.noarch.rpm	SHA-256: 10ade601c261415a582d5ced4b46930b53ff370fbf11027aa6f2be893f8fc9a5
spacewalk-backend-applet-1.2.13-66.el6sat.noarch.rpm	SHA-256: 68b2f16c7fc31f11ed387545c0f205779ab32ad1777a833fcfb5c0afb6507b80
spacewalk-backend-config-files-1.2.13-66.el6sat.noarch.rpm	SHA-256: c5d6986e87309146d915954a08b3d625dbe8fd263c214eef31cd07d08cfc4bef
spacewalk-backend-config-files-common-1.2.13-66.el6sat.noarch.rpm	SHA-256: 99c18afadb3cd82ace0b1817ab34e98764fb4d86290676cc923045457c613a73
spacewalk-backend-config-files-tool-1.2.13-66.el6sat.noarch.rpm	SHA-256: 7d6cca2c958d10c81682f5ba2c53de2f39f238da074eda12ef01887608011b4e
spacewalk-backend-iss-1.2.13-66.el6sat.noarch.rpm	SHA-256: 0b53b4bf2686e74428722885f230cdfe4324639d3185457154a8da475ece84f0
spacewalk-backend-iss-export-1.2.13-66.el6sat.noarch.rpm	SHA-256: 926415c9ee54b3a56820ebd6abf71c23ac2df490d3c9f017a678395654a4f285
spacewalk-backend-libs-1.2.13-66.el6sat.noarch.rpm	SHA-256: 4d1ef8849a2269e84dea83a23b11347c73002ad5d3a3524474c15f090e8e6768
spacewalk-backend-package-push-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: bc6af52949e19b517206bcf58bab1b6fe4a6843c925d12b88cc63588722d542c
spacewalk-backend-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: e3e57e6a42115f07ee75e03adb159b111f7aed453805c322c88aa09bbd320fae
spacewalk-backend-sql-1.2.13-66.el6sat.noarch.rpm	SHA-256: 62441e65f1c1f6bba48a424b5b5212e286c456a2b61527820945610cb5793c95
spacewalk-backend-sql-oracle-1.2.13-66.el6sat.noarch.rpm	SHA-256: 3a75c9f32d6277355defd5798998b6cb4004477fba347fb3cf6de1ba0e9e36d5
spacewalk-backend-tools-1.2.13-66.el6sat.noarch.rpm	SHA-256: 474a9e05b5d7389bb6388ebbd1acb93be2b337379a5082bccdd0bab4c81b0bf0
spacewalk-backend-upload-server-1.2.13-66.el6sat.noarch.rpm	SHA-256: c1e225aa1e1124ddb1a0ef061b067e9bc593d75737caaf5c331aa982f3d791e6
spacewalk-backend-xml-export-libs-1.2.13-66.el6sat.noarch.rpm	SHA-256: 9dec6a3cd959a6292f7491efdecdd4e1a5c4ce11897e88781d88bcc870e52672
spacewalk-backend-xmlrpc-1.2.13-66.el6sat.noarch.rpm	SHA-256: aba1036d9ff9bc38307ca006bce148c831c480b9cfb75230684c56356b3f9c38
spacewalk-backend-xp-1.2.13-66.el6sat.noarch.rpm	SHA-256: 3a0d3647fbc922ddf24846616be2d8c7baa2a65bc2315e8b27fee737f41d5168

Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5

SRPM
spacewalk-backend-1.2.13-66.el5sat.src.rpm	SHA-256: 9c0a8aee85ec759a4b956abc66d0f097b149f6c5acbfa60e93b2587d7ea45bc9
x86_64
spacewalk-backend-1.2.13-66.el5sat.noarch.rpm	SHA-256: ad47752b48f9d769c0dd9030b58988e837467f1e58374b1828270e5306abb641
spacewalk-backend-app-1.2.13-66.el5sat.noarch.rpm	SHA-256: df0e8de247cf6f54ffee2f7c7833227832f854906a40295598340d41c4c8a859
spacewalk-backend-applet-1.2.13-66.el5sat.noarch.rpm	SHA-256: 2ba2f8207b83e9a528738ba86f1747dcd40bd17514824a6ac0f4c0c17af25402
spacewalk-backend-config-files-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7512d303e1178d214ec70b8f60808c3949476603bc04624336f58872bcfac721
spacewalk-backend-config-files-common-1.2.13-66.el5sat.noarch.rpm	SHA-256: a9f73378e0fc298f0aea3c70fb429528bb2445bcc76a690109d0a9863353386e
spacewalk-backend-config-files-tool-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1823db6b504e4975c9c9c76823c36ec4bc2e9abdf9dc94ef9f9b4192ac2bbeff
spacewalk-backend-iss-1.2.13-66.el5sat.noarch.rpm	SHA-256: d40447e40c45fc9c9b76aaa48a61ef0156ce297d94bc0f17254a5273ebe73333
spacewalk-backend-iss-export-1.2.13-66.el5sat.noarch.rpm	SHA-256: 6c0c44debb80c37b21a748f4852f06f3895065b018aa5f7f749e228e196e0c9d
spacewalk-backend-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7de7a9a8db249cb5152c6e9e19e62d49f0e3a0150e2ba8cd1cb6a8e000ad3e0e
spacewalk-backend-package-push-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1796a7c52c3de670e1078db25bca1b7bb160cc32b424f7f2df9fd80ec3a7c660
spacewalk-backend-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 35aa927c29a69ca7fe310f22f1a412a1e6f5b3bf8958ffc70c29230d0593b73d
spacewalk-backend-sql-1.2.13-66.el5sat.noarch.rpm	SHA-256: a0cf0996591604effe4675d2329dda59d1600764bbc33a8448f18e2a42359e93
spacewalk-backend-sql-oracle-1.2.13-66.el5sat.noarch.rpm	SHA-256: cfdc464731d63ffc2bc0803ba5dfc807d0031c1d97e5d75d303970e242cb951d
spacewalk-backend-tools-1.2.13-66.el5sat.noarch.rpm	SHA-256: 06dcd01ed454235540039f5bf250b95859787d50dca64e99daddf7b88b00b1f0
spacewalk-backend-upload-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 38861080d258a1f146e4721cb304e841d17d856aecc1eb93a85e89107f169cfd
spacewalk-backend-xml-export-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 423268426b5caf41f54e7ee39d7d9bf66a31f7a0c9a0b9cb8cdbc4df5628edb7
spacewalk-backend-xmlrpc-1.2.13-66.el5sat.noarch.rpm	SHA-256: a00f21f0e4c774a9736602a4576390a02588e3e1474809689f8ab77db0a2708a
spacewalk-backend-xp-1.2.13-66.el5sat.noarch.rpm	SHA-256: 657b3bd7a44f89acc39add02dc1d1ef445ad81fb120e6281f5e3da2dcc481733
s390x
spacewalk-backend-1.2.13-66.el5sat.noarch.rpm	SHA-256: ad47752b48f9d769c0dd9030b58988e837467f1e58374b1828270e5306abb641
spacewalk-backend-app-1.2.13-66.el5sat.noarch.rpm	SHA-256: df0e8de247cf6f54ffee2f7c7833227832f854906a40295598340d41c4c8a859
spacewalk-backend-applet-1.2.13-66.el5sat.noarch.rpm	SHA-256: 2ba2f8207b83e9a528738ba86f1747dcd40bd17514824a6ac0f4c0c17af25402
spacewalk-backend-config-files-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7512d303e1178d214ec70b8f60808c3949476603bc04624336f58872bcfac721
spacewalk-backend-config-files-common-1.2.13-66.el5sat.noarch.rpm	SHA-256: a9f73378e0fc298f0aea3c70fb429528bb2445bcc76a690109d0a9863353386e
spacewalk-backend-config-files-tool-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1823db6b504e4975c9c9c76823c36ec4bc2e9abdf9dc94ef9f9b4192ac2bbeff
spacewalk-backend-iss-1.2.13-66.el5sat.noarch.rpm	SHA-256: d40447e40c45fc9c9b76aaa48a61ef0156ce297d94bc0f17254a5273ebe73333
spacewalk-backend-iss-export-1.2.13-66.el5sat.noarch.rpm	SHA-256: 6c0c44debb80c37b21a748f4852f06f3895065b018aa5f7f749e228e196e0c9d
spacewalk-backend-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7de7a9a8db249cb5152c6e9e19e62d49f0e3a0150e2ba8cd1cb6a8e000ad3e0e
spacewalk-backend-package-push-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1796a7c52c3de670e1078db25bca1b7bb160cc32b424f7f2df9fd80ec3a7c660
spacewalk-backend-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 35aa927c29a69ca7fe310f22f1a412a1e6f5b3bf8958ffc70c29230d0593b73d
spacewalk-backend-sql-1.2.13-66.el5sat.noarch.rpm	SHA-256: a0cf0996591604effe4675d2329dda59d1600764bbc33a8448f18e2a42359e93
spacewalk-backend-sql-oracle-1.2.13-66.el5sat.noarch.rpm	SHA-256: cfdc464731d63ffc2bc0803ba5dfc807d0031c1d97e5d75d303970e242cb951d
spacewalk-backend-tools-1.2.13-66.el5sat.noarch.rpm	SHA-256: 06dcd01ed454235540039f5bf250b95859787d50dca64e99daddf7b88b00b1f0
spacewalk-backend-upload-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 38861080d258a1f146e4721cb304e841d17d856aecc1eb93a85e89107f169cfd
spacewalk-backend-xml-export-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 423268426b5caf41f54e7ee39d7d9bf66a31f7a0c9a0b9cb8cdbc4df5628edb7
spacewalk-backend-xmlrpc-1.2.13-66.el5sat.noarch.rpm	SHA-256: a00f21f0e4c774a9736602a4576390a02588e3e1474809689f8ab77db0a2708a
spacewalk-backend-xp-1.2.13-66.el5sat.noarch.rpm	SHA-256: 657b3bd7a44f89acc39add02dc1d1ef445ad81fb120e6281f5e3da2dcc481733
i386
spacewalk-backend-1.2.13-66.el5sat.noarch.rpm	SHA-256: ad47752b48f9d769c0dd9030b58988e837467f1e58374b1828270e5306abb641
spacewalk-backend-app-1.2.13-66.el5sat.noarch.rpm	SHA-256: df0e8de247cf6f54ffee2f7c7833227832f854906a40295598340d41c4c8a859
spacewalk-backend-applet-1.2.13-66.el5sat.noarch.rpm	SHA-256: 2ba2f8207b83e9a528738ba86f1747dcd40bd17514824a6ac0f4c0c17af25402
spacewalk-backend-config-files-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7512d303e1178d214ec70b8f60808c3949476603bc04624336f58872bcfac721
spacewalk-backend-config-files-common-1.2.13-66.el5sat.noarch.rpm	SHA-256: a9f73378e0fc298f0aea3c70fb429528bb2445bcc76a690109d0a9863353386e
spacewalk-backend-config-files-tool-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1823db6b504e4975c9c9c76823c36ec4bc2e9abdf9dc94ef9f9b4192ac2bbeff
spacewalk-backend-iss-1.2.13-66.el5sat.noarch.rpm	SHA-256: d40447e40c45fc9c9b76aaa48a61ef0156ce297d94bc0f17254a5273ebe73333
spacewalk-backend-iss-export-1.2.13-66.el5sat.noarch.rpm	SHA-256: 6c0c44debb80c37b21a748f4852f06f3895065b018aa5f7f749e228e196e0c9d
spacewalk-backend-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 7de7a9a8db249cb5152c6e9e19e62d49f0e3a0150e2ba8cd1cb6a8e000ad3e0e
spacewalk-backend-package-push-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 1796a7c52c3de670e1078db25bca1b7bb160cc32b424f7f2df9fd80ec3a7c660
spacewalk-backend-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 35aa927c29a69ca7fe310f22f1a412a1e6f5b3bf8958ffc70c29230d0593b73d
spacewalk-backend-sql-1.2.13-66.el5sat.noarch.rpm	SHA-256: a0cf0996591604effe4675d2329dda59d1600764bbc33a8448f18e2a42359e93
spacewalk-backend-sql-oracle-1.2.13-66.el5sat.noarch.rpm	SHA-256: cfdc464731d63ffc2bc0803ba5dfc807d0031c1d97e5d75d303970e242cb951d
spacewalk-backend-tools-1.2.13-66.el5sat.noarch.rpm	SHA-256: 06dcd01ed454235540039f5bf250b95859787d50dca64e99daddf7b88b00b1f0
spacewalk-backend-upload-server-1.2.13-66.el5sat.noarch.rpm	SHA-256: 38861080d258a1f146e4721cb304e841d17d856aecc1eb93a85e89107f169cfd
spacewalk-backend-xml-export-libs-1.2.13-66.el5sat.noarch.rpm	SHA-256: 423268426b5caf41f54e7ee39d7d9bf66a31f7a0c9a0b9cb8cdbc4df5628edb7
spacewalk-backend-xmlrpc-1.2.13-66.el5sat.noarch.rpm	SHA-256: a00f21f0e4c774a9736602a4576390a02588e3e1474809689f8ab77db0a2708a
spacewalk-backend-xp-1.2.13-66.el5sat.noarch.rpm	SHA-256: 657b3bd7a44f89acc39add02dc1d1ef445ad81fb120e6281f5e3da2dcc481733