LWN.net Logo

Fedora alert FEDORA-2008-9723 (cobbler)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 8 Update: cobbler-1.2.9-1.fc8
Date:  Wed, 19 Nov 2008 14:49:30 +0000
Message-ID:  <20081119144930.57131208D57@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-9723 2008-11-19 13:12:42 -------------------------------------------------------------------------------- Name : cobbler Product : Fedora 8 Version : 1.2.9 Release : 1.fc8 URL : http://cobbler.et.redhat.com Summary : Boot server configurator Description : Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a Python and XMLRPC API for integration with other applications. -------------------------------------------------------------------------------- Update Information: Fixes a security vulnerability where a CobblerWeb user (if so configured) can import a Python module via a web-edited Cheetah template and run commands as root. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2008 Michael DeHaan <mdehaan@redhat.com> - 1.3.0-1 - Upstream changes (see CHANGELOG) * Wed Oct 15 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.8-1 - Upstream changes (see CHANGELOG) * Tue Oct 14 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.7-1 - Upstream changes (see CHANGELOG) * Tue Oct 7 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.6-1 - Upstream changes (see CHANGELOG) * Fri Sep 26 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.5-1 - Upstream changes (see CHANGELOG) * Mon Sep 8 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.4-1 - Rebuild * Sun Sep 7 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.3-1 - Upstream changes (see CHANGELOG) * Fri Sep 5 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.2-1 - Upstream changes (see CHANGELOG) * Tue Sep 2 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.1-1 - Upstream changes (see CHANGELOG) - Package unowned directories * Fri Aug 29 2008 Michael DeHaan <mdehaan@redhat.com> - 1.2.0-1 - Upstream changes (see CHANGELOG) * Tue Jun 10 2008 Michael DeHaan <mdehaan@redhat.com> - 1.0.3-1 - Upstream changes (see CHANGELOG) * Mon Jun 9 2008 Michael DeHaan <mdehaan@redhat.com> - 1.0.2-1 - Upstream changes (see CHANGELOG) * Tue Jun 3 2008 Michael DeHaan <mdehaan@redhat.com> - 1.0.1-1 - Upstream changes (see CHANGELOG) - stop owning files in tftpboot - condrestart for Apache * Tue May 27 2008 Michael DeHaan <mdehaan@redhat.com> - 1.0.0-2 - Upstream changes (see CHANGELOG) -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update cobbler' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2009, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds