Oval Definition:oval:org.opensuse.security:def:100081
Revision Date:2022-02-18Version:1
Title: (Important)
Description:

This update for cobbler fixes the following issues:

- CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). - CVE-2021-45082: Fixed incomplete template sanitation (bsc#1193678).

The following non-security bugs were fixed:

- Fix issues with installation module logging and validation (bsc#1195918) - Move configuration files ownership to apache (bsc#1195906) - Remove hardcoded test credentials (bsc#1193673) - Prevent log pollution (bsc#1193675) - Missing sanity check on MongoDB configuration file (bsc#1193676)
Family:unixClass:patch
Status:Reference(s):1162581
1174504
1191563
1192248
1193671
1193673
1193675
1193676
1193678
1195906
1195918
CVE-2021-45082
CVE-2021-45083
SUSE-SU-2021:3899-1
Platform(s):Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
SUSE Enterprise Storage 6
Product(s):
Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure is installed
  • AND cobbler-3.1.2-150300.5.14.1 is installed
    • Definition Synopsis
  • SUSE Enterprise Storage 6 is installed
  • AND Package Information
  • aaa_base-84.87+git20180409.04c9dae-3.52.1 is installed
  • OR aaa_base-extras-84.87+git20180409.04c9dae-3.52.1 is installed
  • OR aaa_base-malloccheck-84.87+git20180409.04c9dae-3.52.1 is installed
    • BACK