{"affected":[{"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"package":{"ecosystem":"SUSE:HPE Helion OpenStack 8","name":"cobbler","purl":"pkg:rpm/suse/cobbler&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 8","name":"cobbler","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"koan":"2.6.6-49.9.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 12","name":"cobbler","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"cobbler":"2.6.6-49.9.1"}]},"package":{"ecosystem":"SUSE:Manager Server 3.0","name":"cobbler","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.6-49.9.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for cobbler fixes the following issues:\n\nThe following security issue has been fixed:\n\n- CVE-2017-1000469: Escape shell parameters provided by the user for the reposync action. (bsc#1074594)\n\nAdditionally, the following non-security issues have been fixed:\n\n- Fix signature for SLES15. (bsc#1075014)\n- Detect if there is already another instance of 'cobbler sync' running and exit with failure if so. (bsc#1081714)\n- Add SLES 15 distro profile. (bsc#1090205)\n- Require tftp(server) instead of atftp.\n","id":"SUSE-SU-2018:1736-1","modified":"2018-06-19T13:50:31Z","published":"2018-06-19T13:50:31Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181736-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1074594"},{"type":"REPORT","url":"https://bugzilla.suse.com/1075014"},{"type":"REPORT","url":"https://bugzilla.suse.com/1081714"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090205"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-1000469"}],"related":["CVE-2017-1000469"],"summary":"Security update for cobbler","upstream":["CVE-2017-1000469"]}