Synopsis

Moderate: spacewalk-java security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

An update for spacewalk-java is now available for Red Hat Satellite 5.7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and the remote management of multiple Linux deployments with a single, centralized tool.

Security Fix(es):

• A stored cross-site scripting (XSS) flaw was found in the way spacewalk-java displayed monitoring probes. An attacker can embed HTML and Javascript in the values for RHNMD User or Filesystem parameters in Satellite, allowing them to inject malicious content into the web page that is then displayed with that probe data. (CVE-2016-3080)
  
• A stored cross-site scripting (XSS) flaw was found in the way spacewalk-java displayed group names. An attacker can embed HTML and Javascript in the values for group names in Satellite, allowing them to inject malicious content into the web page that is then displayed when viewing the snapshot data. (CVE-2016-3097)
  

These issues were discovered by Jan Hutař (Red Hat).

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

For this update to take effect, Red Hat Satellite must be restarted ("/usr/sbin/rhn-satellite restart").

Affected Products

• Red Hat Satellite 5.7 x86_64
• Red Hat Satellite 5.7 s390x

Fixes

• BZ - 1320942 - CVE-2016-3080 spacewalk-monitoring: XSS issue in monitoring probe
• BZ - 1322710 - XSS when you create group with HTML via SSM or API and checks snapshot with this group join/leave
• BZ - 1322747 - CVE-2016-3097 spacewalk-java: Multiple XSS flaws

CVEs

• CVE-2016-3080
• CVE-2016-3097

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Satellite 5.7

SRPM
spacewalk-java-2.3.8-147.el6sat.src.rpm	SHA-256: 957005c31338f764df58f6599695b878a91bbf0e178d04a96747951c8c7063b8
x86_64
spacewalk-java-2.3.8-147.el6sat.noarch.rpm	SHA-256: d21f51441b4ffbc186e9b08e0332fe735b6996115e8d556e655873ed1fb7d96b
spacewalk-java-config-2.3.8-147.el6sat.noarch.rpm	SHA-256: 3b9a45d3ff10d4992f98d2fb9d4134abcda31ff59c7a9e330950c17075ffa022
spacewalk-java-lib-2.3.8-147.el6sat.noarch.rpm	SHA-256: 996fc00b028d4f964381f9bce40269a662e2aca3378d6b2285e1595eaaa55b03
spacewalk-java-oracle-2.3.8-147.el6sat.noarch.rpm	SHA-256: 088ea8304560de4d440699158ae81720e83a4c4105a68ca6f78e9c5239ecbb69
spacewalk-java-postgresql-2.3.8-147.el6sat.noarch.rpm	SHA-256: 63576acf35fecfe3a4bf0a398a9edd516b2fb7a6e41c1d362ec03fbc3dccc37e
spacewalk-taskomatic-2.3.8-147.el6sat.noarch.rpm	SHA-256: 8eb760f766655c9ba666c3fce03157439cde1ff3e8ca3fe75e7d130905836cce
s390x
spacewalk-java-2.3.8-147.el6sat.noarch.rpm	SHA-256: d21f51441b4ffbc186e9b08e0332fe735b6996115e8d556e655873ed1fb7d96b
spacewalk-java-config-2.3.8-147.el6sat.noarch.rpm	SHA-256: 3b9a45d3ff10d4992f98d2fb9d4134abcda31ff59c7a9e330950c17075ffa022
spacewalk-java-lib-2.3.8-147.el6sat.noarch.rpm	SHA-256: 996fc00b028d4f964381f9bce40269a662e2aca3378d6b2285e1595eaaa55b03
spacewalk-java-oracle-2.3.8-147.el6sat.noarch.rpm	SHA-256: 088ea8304560de4d440699158ae81720e83a4c4105a68ca6f78e9c5239ecbb69
spacewalk-java-postgresql-2.3.8-147.el6sat.noarch.rpm	SHA-256: 63576acf35fecfe3a4bf0a398a9edd516b2fb7a6e41c1d362ec03fbc3dccc37e
spacewalk-taskomatic-2.3.8-147.el6sat.noarch.rpm	SHA-256: 8eb760f766655c9ba666c3fce03157439cde1ff3e8ca3fe75e7d130905836cce