{"id":"RHSA-2017:1601","summary":"Red Hat Security Advisory: CFME 5.7.3 security, bug fix and enhancement update","modified":"2026-07-01T10:02:35Z","published":"2024-09-26T23:00:09Z","upstream":["CVE-2016-4457","CVE-2016-7047","CVE-2017-7497"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1601"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341308"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350340"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374215"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402992"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403358"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414869"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419604"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428944"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430468"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434152"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434952"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436074"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436222"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436226"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436228"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436232"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436233"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436236"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436237"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436756"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437146"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437148"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437595"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437909"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437912"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437925"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438094"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438866"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439291"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439314"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439319"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439789"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439945"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440399"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440400"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440401"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440402"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440701"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441199"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441202"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441204"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441251"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441272"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441293"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441331"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441401"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441648"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441727"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441742"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441752"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441754"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441855"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442105"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442156"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442164"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442169"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442177"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442764"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442769"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442774"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442865"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1442877"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443246"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443248"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443563"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443572"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443580"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443697"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443799"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444037"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444041"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444052"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444062"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444178"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444182"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444214"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444220"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444486"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444494"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444875"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445318"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445356"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445383"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445806"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445901"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445902"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446305"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446773"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446787"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446791"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447091"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448046"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448073"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448140"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448142"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448148"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448418"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448421"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448530"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448538"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448870"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448872"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449389"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449392"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449394"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449397"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449398"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449403"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449753"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450084"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450086"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450088"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450150"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450217"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450421"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450508"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450511"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450512"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450514"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450519"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450525"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450526"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451827"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452172"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452227"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452350"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452363"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452383"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452764"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452824"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454383"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454442"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454443"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454446"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454618"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455302"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455600"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455686"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455933"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456021"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457911"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457924"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458810"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458811"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459180"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459307"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459319"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459563"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460979"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461170"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461540"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461886"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463669"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1601.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-4457"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-4457"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4457"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-7047"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-7047"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7047"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-7497"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-7497"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7497"}],"affected":[{"package":{"name":"cfme","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/cfme"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.3.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"cfme-appliance","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/cfme-appliance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.3.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"cfme-appliance-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/cfme-appliance-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.3.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"cfme-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/cfme-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.3.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"cfme-gemset","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/cfme-gemset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.3.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-nokogiri","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-nokogiri"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-nokogiri-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-nokogiri-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-nokogiri-doc","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-nokogiri-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-ovirt-engine-sdk4","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-ovirt-engine-sdk4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-ovirt-engine-sdk4-debuginfo","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-ovirt-engine-sdk4-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}},{"package":{"name":"rh-ruby23-rubygem-ovirt-engine-sdk4-doc","ecosystem":"Red Hat:cloudforms_managementengine:5.7::el7","purl":"pkg:rpm/redhat/rh-ruby23-rubygem-ovirt-engine-sdk4-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-1.el7cf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:1601.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}