SUSE-SU-2018:2551-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 29 Aug 2018, 15:39
Last modified:04 Feb 2026, 03:39
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
29 Aug 2018, 15:39
Published
Vulnerability first disclosed
04 Feb 2026, 03:39
Last Modified
Vulnerability information updated
Description
Security update for cobbler This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoint (bsc#1104190, bsc#1105440, CVE-2018-1000226) Other bugs fixed: - Fix kernel options when generating bootiso (bsc#1101670)
Affected Systems
- suse•cobbler&distro=SUSE Manager Server 3.2
< 2.6.6-6.7.1
References (10)
- https://www.suse.com/support/update/announcement/2018/suse-su-20182551-1/
- https://bugzilla.suse.com/1101670
- https://bugzilla.suse.com/1104189
- https://bugzilla.suse.com/1104190
- https://bugzilla.suse.com/1104287
- https://bugzilla.suse.com/1105440
- https://bugzilla.suse.com/1105442
- https://www.suse.com/security/cve/CVE-2018-1000225
- https://www.suse.com/security/cve/CVE-2018-1000226
- https://www.suse.com/security/cve/CVE-2018-10931