{"id":"SUSE-SU-2018:1736-1","summary":"Security update for cobbler","details":"This update for cobbler fixes the following issues:\n\nThe following security issue has been fixed:\n\n- CVE-2017-1000469: Escape shell parameters provided by the user for the reposync action. (bsc#1074594)\n\nAdditionally, the following non-security issues have been fixed:\n\n- Fix signature for SLES15. (bsc#1075014)\n- Detect if there is already another instance of 'cobbler sync' running and exit with failure if so. (bsc#1081714)\n- Add SLES 15 distro profile. (bsc#1090205)\n- Require tftp(server) instead of atftp.\n","modified":"2026-03-11T06:48:12.446279Z","published":"2018-06-19T13:50:31Z","related":["CVE-2017-1000469"],"upstream":["CVE-2017-1000469"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181736-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1074594"},{"type":"REPORT","url":"https://bugzilla.suse.com/1075014"},{"type":"REPORT","url":"https://bugzilla.suse.com/1081714"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090205"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-1000469"}],"affected":[{"package":{"name":"cobbler","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/cobbler&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}]}],"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1736-1.json"}},{"package":{"name":"cobbler","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}]}],"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1736-1.json"}},{"package":{"name":"cobbler","ecosystem":"SUSE:Manager Client Tools 12","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.6.6-49.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1736-1.json"}},{"package":{"name":"cobbler","ecosystem":"SUSE:Manager Server 3.0","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%203.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}]}],"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1736-1.json"}}],"schema_version":"1.7.5"}