(RHSA-2013:0848) Moderate: Red Hat Network Satellite spacewalk-backend security update

Red Hat Network (RHN) Satellite is a system management tool for Linux-based
infrastructures. It allows for provisioning, monitoring, and remote
management of multiple Linux deployments with a single, centralized tool.

It was discovered that Red Hat Network Satellite did not fully check the
authenticity of a client beyond the initial authentication check during an
Inter-Satellite Sync operation. If a remote attacker were to modify the
satellite-sync client to skip the initial authentication call, they could
obtain all channel content from any Red Hat Network Satellite server that
could be reached, even if Inter-Satellite Sync support was disabled.
(CVE-2013-2056)

This issue was discovered by Jan Pazdziora of the Red Hat Satellite
Engineering team.

Users of Red Hat Network Satellite 5.3, 5.4, and 5.5 are advised to upgrade
to these updated packages, which resolve this issue. For this update to
take effect, Red Hat Network Satellite must be restarted. Refer to the
Solution section for details.