SUSE OpenStack Cloud 8: Advisory 2018:2561-1 Important: Cobbler API Fixes
suse
August 30, 2018
An update that solves three vulnerabilities and has four fixes is now available
Summary
This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoint (bsc#1104190, bsc#1105440, CVE-2018-1000226) Other bugs fixed: - Do not try to hardlink to a symlink. The result will be a dangling symlink in the general case. (bsc#1097733) - fix kernel options when generating bootiso (bsc#1101670) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2018-1795=1 - SUSE Manager Tools 12:
Topics Covered
References
#1097733 #1101670 #1104189 #1104190 #1104287
#1105440 #1105442
Cross- CVE-2018-1000225 CVE-2018-1000226 CVE-2018-10931
Affected Products:
SUSE OpenStack Cloud 8
SUSE Manager Tools 12
SUSE Manager Server 3.0
HPE Helion Openstack 8
https://www.suse.com/security/cve/CVE-2018-1000225.html
https://www.suse.com/security/cve/CVE-2018-1000226.html
https://www.suse.com/security/cve/CVE-2018-10931.html
https://bugzilla.suse.com/1097733
https://bugzilla.suse.com/1101670
https://bugzilla.suse.com/1104189
https://bugzilla.suse.com/1104190
https://bugzilla.suse.com/1104287
https://bugzilla.suse.com/1105440
https://bugzilla.suse.com/1105442
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2018:2561-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!