Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP1:GA
patchinfo.8146
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.8146
<patchinfo incident="8146"> <issue id="1097733" tracker="bnc">Running cobbler sync creates a broken symlink</issue> <issue id="1104287" tracker="bnc">VUL-1: CVE-2018-10931: cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC</issue> <issue id="1104189" tracker="bnc">VUL-0: cobbler: Persistent XSS</issue> <issue id="1105442" tracker="bnc">VUL-0: CVE-2018-1000225: cobbler: vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web</issue> <issue id="1104190" tracker="bnc">VUL-0: cobbler: Incorrect Authentication</issue> <issue id="1105440" tracker="bnc">VUL-0: CVE-2018-1000226: cobbler: contains a Incorrect Access Control vulnerability in XMLRPC api</issue> <issue id="1097733" tracker="bnc">Running cobbler sync creates a broken symlink</issue> <issue id="1101670" tracker="bnc">cobbler buildiso: kernel options are rendered in wrong format</issue> <issue id="2018-10931" tracker="cve"/> <issue id="2018-1000225" tracker="cve"/> <issue id="2018-1000226" tracker="cve"/> <rating>important</rating> <packager>juliogonzalezgil</packager> <category>security</category> <summary>Security update for cobbler</summary> <description>This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoint (bsc#1104190, bsc#1105440, CVE-2018-1000226) Other bugs fixed: - Do not try to hardlink to a symlink. The result will be a dangling symlink in the general case. (bsc#1097733) - fix kernel options when generating bootiso (bsc#1101670) </description> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor