{"id":"RHSA-2016:1996","summary":"Red Hat Security Advisory: CFME 4.1 bug fixes and enhancement update","modified":"2026-06-27T10:04:48Z","published":"2024-09-15T23:41:01Z","upstream":["CVE-2016-7040"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1996"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374815"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375089"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375205"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375311"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375326"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376167"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376168"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376169"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376170"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337552"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337577"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376173"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348649"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349059"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349423"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351332"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352016"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353291"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354503"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357865"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358323"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361175"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361176"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361178"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361693"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362227"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362627"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362631"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362634"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362704"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363753"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363754"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371979"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371980"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371981"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372413"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372775"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372801"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376141"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376143"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376144"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377416"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377420"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343517"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343717"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343719"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346953"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346989"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346990"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347278"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347692"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348631"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348637"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348644"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348648"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363891"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364222"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364501"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366358"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366596"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366597"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366598"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366599"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368165"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368167"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368168"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368170"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369583"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370196"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370198"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370202"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370208"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370209"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370211"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370216"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370309"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370310"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370476"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370478"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370480"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370481"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370488"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370568"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370569"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370574"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370575"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370586"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371174"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371267"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371268"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371269"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371270"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371272"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371311"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371640"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371666"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371668"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371669"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371671"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374377"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374420"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374423"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374450"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374695"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375343"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376010"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376130"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376132"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376137"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376138"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376139"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376140"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376146"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376147"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376150"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376151"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376153"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376154"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376155"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376157"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376158"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376159"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376160"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376161"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376162"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376163"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376164"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376165"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376171"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376172"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376174"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376175"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376176"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376177"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376178"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376513"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376520"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376528"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376557"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374696"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376574"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1996.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-7040"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-7040"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7040"}],"affected":[{"package":{"name":"cfme","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/cfme"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"cfme-appliance","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/cfme-appliance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"cfme-appliance-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/cfme-appliance-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"cfme-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/cfme-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"cfme-gemset","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/cfme-gemset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-nokogiri","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-nokogiri"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-nokogiri-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-nokogiri-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-pkg-config","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-pkg-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-pkg-config-doc","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-pkg-config-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.7-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-thin","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-thin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}},{"package":{"name":"rh-ruby22-rubygem-thin-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","purl":"pkg:rpm/redhat/rh-ruby22-rubygem-thin-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:1996.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}