SUSE-SU-2022:0509-1
- Source
- https://www.suse.com/support/update/announcement/2022/suse-su-20220509-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0509-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2022:0509-1
- Related
- Published
- 2022-02-18T10:45:09Z
- Modified
- 2022-02-18T10:45:09Z
- Summary
- Security update for cobbler
- Details
-
This update for cobbler fixes the following issues:
- CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671).
- CVE-2021-45082: Fixed incomplete template sanitation (bsc#1193678).
The following non-security bugs were fixed:
- Fix issues with installation module logging and validation (bsc#1195918)
- Move configuration files ownership to apache (bsc#1195906)
- Remove hardcoded test credentials (bsc#1193673)
- Prevent log pollution (bsc#1193675)
- Missing sanity check on MongoDB configuration file (bsc#1193676)
- References
-
- https://www.suse.com/support/update/announcement/2022/suse-su-20220509-1/
- https://bugzilla.suse.com/1193671
- https://bugzilla.suse.com/1193673
- https://bugzilla.suse.com/1193675
- https://bugzilla.suse.com/1193676
- https://bugzilla.suse.com/1193678
- https://bugzilla.suse.com/1195906
- https://bugzilla.suse.com/1195918
- https://www.suse.com/security/cve/CVE-2021-45082
- https://www.suse.com/security/cve/CVE-2021-45083