Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41 - FEDORA-2024-4f04edd1e7 critical: cobbler security update

fedora
Calendar Grey November 26, 2024
Dist Fedora Esm H88
The latest version of Cobbler, now at 3.3.7, addresses CVE-2024-47533 while improving the network installation capabilities for Fedora 41.
Update to 3.3.7 - CVE-2024-47533

Summary

Cobbler is a network install server. Cobbler supports PXE, ISO

virtualized installs, and re-installing existing Linux machines. The

last two modes use a helper tool, 'koan', that integrates with cobbler.

Cobbler's advanced features include importing distributions from DVDs

and rsync mirrors, kickstart templating, integrated yum mirroring, and

built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration

with other applications.

Update Information:

Update to 3.3.7 - CVE-2024-47533

Change Log

* Sun Nov 17 2024 Orion Poplawski - 3.3.7-1 - Update to 3.3.7 (CVE-2024-47533) * Fri Sep 27 2024 Carl George - 3.3.6-2 - Fix cheetah dependency rhbz#2314630

References


[ 1 ] Bug #2326874 - cobbler-3.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2326874 [ 2 ] Bug #2327082 - CVE-2024-47533 cobbler: Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2327082

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4f04edd1e7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: cobbler
Product: Fedora 41
Version: 3.3.7
Release: 1.fc41
Summary: Boot server configurator

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here