RHSA-2013%3A0544

Red Hat Subscription Asset Manager 1.2, which fixes several security issues, multiple bugs, and adds various enhancements, is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. [Updated 25th February 2013] This erratum previously failed to include the updated rubygem-rack package. It also previously incorrectly documented CVE-2012-5604 as being fixed, however that issue never affected Subscription Asset Manager and is no longer listed. As well, CVE-2012-6496 was described as being fixed, however that issue had previously been fixed in RHSA-2013:0154.