SUSE-SU-2018:2561-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2561-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2018:2561-1
- Related
- Published
- 2018-08-30T14:10:22Z
- Modified
- 2018-08-30T14:10:22Z
- Summary
- Security update for cobbler
- Details
-
This update for cobbler fixes the following issues:
Security issues fixed:
- Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint (bsc#1104190, bsc#1105440, CVE-2018-1000226)
Other bugs fixed:
- Do not try to hardlink to a symlink. The result will be a dangling symlink in the general case. (bsc#1097733)
- fix kernel options when generating bootiso (bsc#1101670)
- References
-
- https://www.suse.com/support/update/announcement/2018/suse-su-20182561-1/
- https://bugzilla.suse.com/1097733
- https://bugzilla.suse.com/1101670
- https://bugzilla.suse.com/1104189
- https://bugzilla.suse.com/1104190
- https://bugzilla.suse.com/1104287
- https://bugzilla.suse.com/1105440
- https://bugzilla.suse.com/1105442
- https://www.suse.com/security/cve/CVE-2018-1000225
- https://www.suse.com/security/cve/CVE-2018-1000226
- https://www.suse.com/security/cve/CVE-2018-10931
Affected packages
SUSE:HPE Helion OpenStack 8 / cobbler
Package
- Name
- cobbler
- Purl
- purl:rpm/suse/cobbler&distro=HPE%20Helion%20OpenStack%208
SUSE:OpenStack Cloud 8 / cobbler
Package
- Name
- cobbler
- Purl
- purl:rpm/suse/cobbler&distro=SUSE%20OpenStack%20Cloud%208
SUSE:Manager Tools 12 / cobbler
Package
- Name
- cobbler
- Purl
- purl:rpm/suse/cobbler&distro=SUSE%20Manager%20Tools%2012