[Spacewalk-list] Critical security vulnerability in cobbler

[Tomas Kasparek]

Hello Spacewalkers,

there's a critical security issue in cobbler, CVE-2018-10931
<https://access.redhat.com/security/cve/cve-2018-10931>, for which I've
just pushed fixes into nightly, 2.8 and 2.7 repositories so an update for
cobbler should appear for you.
If you're using older version of Spacewalk, you can upgrade manually by
installing package from Spacewalk Copr, the build can be found here:
https://copr.fedorainfracloud.org/coprs/g/spacewalkproject/nightly/build/786377/
In case you want to patch your cobbler manually, the commit which fixes the
issue can be found here:
https://github.com/spacewalkproject/cobbler/commit/f41812b5ba9494fcafc77d4376bfbbe3d6781b31

Best regards,
Tomáš
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20180809/b261ae57/attachment.htm>