(RHSA-2018:2733) Critical: rubygem-smart_proxy_dynflow security update

The rubygem provided by rubygem-smart_proxy_dynflow is a plugin into Foreman’s Smart Proxy for running Dynflow actions on the Smart Proxy.

Security Fix(es):

• smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature (CVE-2018-14643)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Ivan Necas (Red Hat).