RHSA-2016:0590Medium

Red Hat Security Advisory: spacewalk-java security update

Published
April 4, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2015-0284 →CVE-2016-2103 →CVE-2016-2104 →CVE-2016-3079 →

📋 Description

CVE-2015-0284 — Satellite: stored XSS in user details fields (incomplete fix for CVE-2014-7811) CVE-2016-2103 — 5: multiple stored XSS vulnerabilities CVE-2016-2104 — 5: stored and reflected XSS vulnerabilities CVE-2016-3079 — spacewalk-java: Multiple XSS issues in WebUI

🎯 Affected products8

  • Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-0:2.3.8-134.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-config-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-lib-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-oracle-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-java-postgresql-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)
  • spacewalk-taskomatic-0:2.3.8-134.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (12)