Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -1 articles for you...
89
security advisorysecurity updateFedoraFedora 41 - FEDORA-2024-4f04edd1e7 critical: cobbler security update
Update to 3.3.7 - CVE-2024-47533. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-4f04edd1e7 2024-11-26 03:12:45.928809+00:00 -------------------------------------------------------------------------------- Name : cobbler Product : Fedora 41 Version : 3.3.7 Release : 1.fc41 URL : https://cobbler.github.io/ Summary : Boot server configurator Description : Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications. -------------------------------------------------------------------------------- Update Information: Update to 3.3.7 - CVE-2024-47533 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 17 2024 Orion Poplawski - 3.3.7-1 - Update to 3.3.7 (CVE-2024-47533) * Fri Sep 27 2024 Carl George - 3.3.6-2 - Fix cheetah dependency rhbz#2314630 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2326874 - cobbler-3.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2326874 [ 2 ] Bug #2327082 - CVE-2024-47533 cobbler: Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2327082 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4f04edd1e7' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 26, 2024
•Critical
Fedora
89
security advisorysecurity issuefedoraFedora 28 COBBLER-2018-1d2a79fe1c Critical Network Installation Issue
Fix empty man pages ---- - Revert bind_manage_ipmi feature that is broken on 2.8 - Use pathfix.py to fix python shebangs ---- - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931) - Make koan require python2-ethtool (BZ 1638933). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-1d2a79fe1c 2018-12-05 01:56:10.525055 --------------------------------------------------------------------------------Name : cobbler Product : Fedora 28 Version : 2.8.4 Release : 5.fc28 URL : https://cobbler.github.io/ Summary : Boot server configurator Description : Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XMLRPC API for integration with other applications. --------------------------------------------------------------------------------Update Information: Fix empty man pages ---- - Revert bind_manage_ipmi feature that is broken on 2.8 - Use pathfix.py to fix python shebangs ---- - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931) - Make koan require python2-ethtool (BZ 1638933) --------------------------------------------------------------------------------ChangeLog: * Mon Nov 26 2018 Orion Poplawski - 2.8.4-5 - Fix empty man pages (BZ 1653415) * Mon Nov 26 2018 Orion Poplawski - 2.8.4-4 - Revert bind_manage_ipmi feature that is broken on 2.8 * Sun Nov 25 2018 Orion Poplawski - 2.8.4-3 - Use pathfix.py to fix python shebangs * Sun Nov 25 2018 Orion Poplawski - 2.8.4-2 - Make koan require python2-ethtool (BZ 1638933) * Sat Nov24 2018 Orion Poplawski - 2.8.4-1 - Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931) * Thu Jul 12 2018 Fedora Release Engineering - 2.8.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed May 30 2018 Orion Poplawski - 2.8.3-3 - koan requires urlgrabber * Mon May 28 2018 Nicolas Chauvet - 2.8.3-2 - Restore mergeability with epel7 * Mon May 28 2018 Nicolas Chauvet - 2.8.3-1 - Update to 2.8.3 - security bugfix --------------------------------------------------------------------------------References: [ 1 ] Bug #1653415 - Man page of cobbler and koam is empty https://bugzilla.redhat.com/show_bug.cgi?id=1653415 [ 2 ] Bug #1643860 - Kickstart generation is broken https://bugzilla.redhat.com/show_bug.cgi?id=1643860 [ 3 ] Bug #1614433 - CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1614433 [ 4 ] Bug #1613292 - cobbler: XMLRPC API endpoints are not correctly validating security tokens [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1613292 [ 5 ] Bug #1638933 - koan RPM should require python-ethtool https://bugzilla.redhat.com/show_bug.cgi?id=1638933 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-1d2a79fe1c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 05, 2018
•Critical
Fedora
89
security advisorycriticalsoftware updateFedora Core 4: FEDORA-2006-130 Critical Update for System-Config-Netboot
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-130 2006-03-01 ---------------------------------------------------------------------Product : Fedora Core 4 Name : system-config-netboot Version : 0.1.38 Release : 2_FC4 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. ---------------------------------------------------------------------* Tue Feb 14 2006 Jason Vas Dias - 0.1.38-1 - further fix for f1@micromemory.com problem (now bug 181365) deal with required binaries that have been replaced by scripts - fix bug 178395: allow setting of NISDOMAIN - fix bug 174629: fix initscript patches (prevent application!) - fix bug 182869: should Requires(post): hicolor-icon-theme - fix issues reported by brian@chpc.utah.edu (bugs to be raised): o mkdiskless must not wipe out client root customizations on re-run o give serial console checkbox a speed drop down list - add "Use tty0 console also" checkbox option o allow editing of extra boot options in the config file o do not create snapshot directory for network boot targets o remove /etc/ssh keys and make /etc/ssh a snapshot file o mount /var/cache, /var/lib/misc, /var/lib/mrtg on tmpfs / snapshot o fix network syslog : '*' -> '*.*' * Thu Feb 9 2006 Jason Vas Dias - 0.1.37-1 - fix problem reported by
Mar 01, 2006
•Critical
Fedora
89
security advisoryFedora Corecritical updateFedora Core 4: FEDORA-2005-782 Critical: System Config Netboot Update
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-782 2005-08-22 ---------------------------------------------------------------------Product : Fedora Core 4 Name : system-config-netboot Version : 0.1.30 Release : 1_FC4 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. ---------------------------------------------------------------------* Fri Aug 19 2005 Jason Vas Dias 0.1.30-1 - fix bug 166018 : disklessrc's findhardware was grep-ping for PCI vendor:device IDs in the pcitable; it now uses /lib/modules/$kernel/modules.pcimap instead. * Thu Aug 18 2005 Jason Vas Dias 0.1.28-1 - fix bug 166217 : the fixed-size initrd was not big enough for RHEL-4 smp kernel. updateDiskless now creates the initrd first in a directory; its size is then determined and the initrd.img is created with sufficient size. pxeos.py now determines the uncompressed size and pxeboot.py now writes the correct ramdisk_size to the syslinux.cfg file. ---------------------------------------------------------------------This update can be downloaded from: c2e1650e9fc07a9746c1e36125a62f6f SRPMS/system-config-netboot-0.1.30-1_FC4.src.rpm 5c7f56d4145badf9174c2ea409c14dac x86_64/system-config-netboot-0.1.30-1_FC4.noarch.rpm 5c7f56d4145badf9174c2ea409c14dac i386/system-config-netboot-0.1.30-1_FC4.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Aug 22, 2005
•Critical
Fedora
89
security advisoryfedoraupdateFedora Core 3 Security Advisory: Update for System-Config-Netboot
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-752 2005-08-12 ---------------------------------------------------------------------Product : Fedora Core 3 Name : system-config-netboot Version : 0.1.26 Release : 1_FC3 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. ---------------------------------------------------------------------* Thu Aug 11 2005 Jason Vas Dias 0.1.26-1 - fix bug 165772 : read-only root filesystem reported as mounted with "rw" option It appears that the initscripts package requires a "READONLY=yes" option in /etc/sysconfig/init in the client root for rc.sysinit not to attempt to mount it read-write. - fix bug 165735 : diskless clients cannot cope with no DNS PTR record for their IP address It was possible for multiple clients who were unable to determine their host name to mount the same snapshot directory - this is now impossible; If clients are unable to determine their host name and have empty SNAPSHOT settings, the IP address is used for the snapshot directory. It is also now possible to set the hostname and domainname without DNS by the DHCP server supplying the host-name option. - fix bug 165730: prevent kernel*-2.6.9-12.2.EL getting an Oops when 'host' is run ---------------------------------------------------------------------This update can be downloaded from: 331c30ed93711f0337f717a17549bcfd SRPMS/system-config-netboot-0.1.26-1_FC3.src.rpm 64c614034e8d775fae4b88508b2cbefa x86_64/system-config-netboot-0.1.26-1_FC3.noarch.rpm 64c614034e8d775fae4b88508b2cbefa i386/system-config-netboot-0.1.26-1_FC3.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date'command. -----------------------------------------------------------------------fedora-announce-list mailing list
Aug 15, 2005
•Important
Fedora
89
security advisorymoderateupdateFedora Core 4 FEDORA-2005-725 Moderate: System-Config-Netboot Update
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-725 2005-08-09 ---------------------------------------------------------------------Product : Fedora Core 4 Name : system-config-netboot Version : 0.1.24 Release : 1_FC4 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. ---------------------------------------------------------------------* Fri Aug 5 2005 Jason Vas Dias 0.1.24-1 - fix bug 164776: don't write empty 'ks=' string in pxeboot.py Fix network install parameters: Instead of just writing unused 'ks.cfg' file, specify loader 'method=' and 'ip=' arguments if no kickstart file given. ---------------------------------------------------------------------This update can be downloaded from: f007d59a98aab889717222723f635cc5 SRPMS/system-config-netboot-0.1.24-1_FC4.src.rpm 51bf3778f934db635d419a9a6b8f0c63 x86_64/system-config-netboot-0.1.24-1_FC4.noarch.rpm 51bf3778f934db635d419a9a6b8f0c63 i386/system-config-netboot-0.1.24-1_FC4.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Aug 11, 2005
Fedora
89
security advisoryFedorabug fixFedora Core 3 System-Config-Netboot Updates: Critical Bug Fixes
Update package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-628 2005-07-22 ---------------------------------------------------------------------Product : Fedora Core 3 Name : system-config-netboot Version : 0.1.22 Release : 1_FC3 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. ---------------------------------------------------------------------* Fri Jul 22 2005 Jason Vas Dias 0.1.22-1 - fix bugs 164011, 164012: updateDiskless now resolves missing module dependencies in the initrd, and returns an error for missing module files and executables. - fix bug 161904: fix tooltips in pxeosdialog and NFS server label * Wed Jun 15 2005 Jason Vas Dias 0.1.20-1 - fix addendum to bugs 149000/135411: updateDiskless: Do not create SELinux xattr labels in the initrd filesystem * Mon Jun 13 2005 Jason Vas Dias 0.1.18-1 - fix bugs 159490, 159996, 160143 * Wed Jun 8 2005 Jason Vas Dias 0.1.17-1 - fix bugs 159490, 159390, 159064, 156274 ---------------------------------------------------------------------This update can be downloaded from: 32f12e42ff18211e5864550de1746a64 SRPMS/system-config-netboot-0.1.22-1_FC3.src.rpm b8ab981cfef86d91b3873446644b67b2 x86_64/system-config-netboot-0.1.22-1_FC3.noarch.rpm b8ab981cfef86d91b3873446644b67b2 i386/system-config-netboot-0.1.22-1_FC3.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Jul 22, 2005
•Critical
Fedora
89
security advisorymoderateFedora CoreFedora Core: FEDORA-2005-397 Moderate: Fixes InitrdImg Problems
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-397 2005-05-27 ---------------------------------------------------------------------Product : Fedora Core 3 Name : system-config-netboot Version : 0.1.16 Release : 1_FC3 Summary : system-config-netboot is an network booting/install configuration utility Description : system-config-netboot is a utility which allows you to configure diskless environments and network installations. --------------------------------------------------------------------- Fixes problems with generating unuseable initrd.img diskless boot images, missing snapshot files, running /sbin/init at boot, and various python warnings. ---------------------------------------------------------------------* Thu May 26 2005 Jason Vas Dias 0.1.16-1 - fix bugs 144240, 148022, 149000, 153047, 154982 * Thu Apr 21 2005 Dan Walsh 0.1.14-1 - Apply Ronny Buchmann patch system-config-netboot.glade has a wrong id for the kickstart file input. pxeosdialog.py wants osKickstartEntry and produces a traceback later, because it didn't get a node for it. * Fri Apr 1 2005 Dan Walsh 0.1.13-1 - Fix python gtk.False -> False * Mon Dec 20 2004 Dan Walsh 0.1.12-1 - Remove references to /bin/ash * Mon Nov 15 2004 Dan Walsh 0.1.11-1 - Remove Alchemist import * Thu Nov 11 2004 Dan Walsh 0.1.10-1 - Apply Mustafa Mahudhawala for disklessrc * Mon Nov 1 2004 Dan Walsh 0.1.9-1 - Fix pxeos to grab correct files, eliminate extra / - Bug #115652 * Wed Oct 6 2004 Dan Walsh 0.1.8-1 - Update lang * Fri Oct 1 2004 Dan Walsh 0.1.7-1 - Update languages * Thu Sep 30 2004 Dan Walsh 0.1.6-1 - Fix location of mkinstalldirs * Tue Sep 28 2004 Dan Walsh 0.1.5-1 - Cleanup rsync messages and replace RHEL3 with RHEL * Mon Sep 27 2004 Dan Walsh 0.1.4-1 - Split netboot_util into netboot_gtk,so command line will work without X-Windows. * Thu Jun 10 2004 Dan Walsh 0.1.3-5 - Fix internationalization calls in pxeos and pxeboot * Wed Mar 24 2004 Dan Walsh 0.1.3-4 - Fix warning messages * Wed Mar 24 2004 Dan Walsh 0.1.3-3 - Add additional languages * Tue Jan 6 2004 Dan Walsh 0.1.3-2 - Remove python2.2 requirment * Thu Dec 11 2003 Dan Walsh 0.1.3-1 - Rename to system-config-netboot * Tue Nov 11 2003 Dan Walsh 0.1.2-2 - Remove quotes used to handle spaces in dir names. Spaces will not be allowed. * Wed Nov 5 2003 Dan Walsh 0.1.2-1 - Cleanup pxe handling add kickstart more error checking * Wed Nov 5 2003 Dan Walsh 0.1.1-23 - Fix kickstart handling * Wed Oct 22 2003 Dan Walsh 0.1.1-22 - Bump * Wed Oct 22 2003 Dan Walsh 0.1.1-21 - Update with fixes from Oracle. * Tue Oct 7 2003 Dan Walsh 0.1.1-20 - bump * Tue Sep 30 2003 Dan Walsh 0.1.1-19 - Fix documentation - Start with default initrd ram_size=10000 * Wed Sep 24 2003 Dan Walsh 0.1.1-18 - Add documentation * Tue Sep 16 2003 Dan Walsh 0.1.1-17 - Fix nfs directory selection * Fri Sep 12 2003 Dan Walsh 0.1.1-16 - Make several changes suggested by Tammy. - Fix man pages and pxeos bugs. * Tue Sep 2 2003 Dan Walsh 0.1.1-15 - Change to use snapshot name for diskless mount point instead of ip address. * Tue Aug 19 2003 Dan Walsh 0.1.1-14 - Add /etc/cups/certs to files for diskless * Wed Jul 30 2003 Dan Walsh 0.1.1-13 - Fix man page * Tue Jul 22 2003 Dan Walsh 0.1.1-12 - Improve boot up performance * Sat Jul 19 2003 Dan Walsh 0.1.1-11 - Update pxeboot * Mon Jul 7 2003 Dan Walsh 0.1.1-10 - Fix app title * Mon Jul 7 2003 Dan Walsh 0.1.1-9 - remove busybox-anaconda as a required package - Change Red Hat Linux to Red Hat Enterprise Linux * Sun Jul 6 2003 Dan Walsh 0.1.1-7 - Fix relative paths in mkdiskless * Tue Jul 1 2003 Dan Walsh 0.1.1-6 - Add busybox-anaconda as arequired package * Mon Jun 16 2003 Dan Walsh 0.1.1-5 - Fix /usr/sbin/system-config-netboot link. * Tue Apr 29 2003 Dan Walsh 0.1.1-4 - Add syncfiles to speed up firstboot in diskless * Tue Apr 29 2003 Dan Walsh 0.1.1-3 - Fix gui problems * Fri Apr 18 2003 Dan Walsh 0.1.1-2 - Add ExclusiveArch: i386 x86_64 * Wed Apr 16 2003 Dan Walsh 0.1.1-1 - Move setup stuff into command line pxeos class * Fri Apr 4 2003 Dan Walsh 0.1.0-23 - Fix OS propagation problems * Tue Apr 1 2003 Dan Walsh 0.1.0-22 - Add Man pages for pxeos and pxeboot * Tue Apr 1 2003 Dan Walsh 0.1.0-21 - setup tftpboot directory * Tue Apr 1 2003 Dan Walsh 0.1.0-20 - Cleanup first time wizard, to be able to define network install or diskless * Fri Mar 28 2003 Dan Walsh 0.1.0-19 - remove erroneous exit from disklessrc * Thu Mar 27 2003 Dan Walsh 0.1.0-18 - Add command line support for pxeos and pxeboot * Fri Mar 21 2003 Dan Walsh 0.1.0-17 - Add syncfiles to speed up diskless * Tue Mar 18 2003 Dan Walsh 0.1.0-16 - Add diskless support to GUI * Wed Mar 12 2003 Dan Walsh 0.1.0-15 - Fix GUI and remove swap * Wed Mar 12 2003 Dan Walsh 0.1.0-14 - add missing diskless files * Fri Mar 7 2003 Dan Walsh 0.1.0-13 - correct diskless paths * Wed Jan 29 2003 Dan Walsh 0.1.0-12 - eliminate /dev/root * Mon Jan 27 2003 Dan Walsh 0.1.0-11 - Add additional dialogs and fix pxe file writes * Fri Jan 24 2003 Dan Walsh 0.1.0-10 - Update to support diskless environment * Fri Jan 24 2003 Dan Walsh 0.1.0-9 - Fix Typos * Tue Jan 7 2003 Dan Walsh 0.1.0-8 - Fix errors * Thu Dec 19 2002 Dan Walsh 0.1.0-7 - Fix GUI to create config files in new format * Thu Nov 7 2002 Dan Walsh 0.1.0-6 - Check services and start them if they are not running * Fri Oct 25 2002 Dan Walsh 0.1.0-5 - Add mftp * Thu Oct 24 2002 Dan Walsh - Add diskless support * Thu Oct 17 2002 Dan Walsh -cleanup * Wed Sep 25 2002 Dan Walsh - Initial build. ---------------------------------------------------------------------This update can be downloaded from: 2e79f4e334da2b64e6b2b4f9e7fd40f2 SRPMS/system-config-netboot-0.1.16-1_FC3.src.rpm d09180a3498fddea1de41729a33ae890 x86_64/system-config-netboot-0.1.16-1_FC3.noarch.rpm d09180a3498fddea1de41729a33ae890 i386/system-config-netboot-0.1.16-1_FC3.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
May 27, 2005
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!