Skip to content
OpenAdvisories
Unscored RHSA-2010:0775 1 CVE

Red Hat Security Advisory: cobbler security update

Published Sep 15, 2024 · Updated Jan 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.3::el4 cobbler 0:1.6.6-15.el4sat
Red Hat · Network Satellite 5 network_satellite:5.3::el4 cobbler-debuginfo 0:1.6.6-15.el4sat
Red Hat · Network Satellite 5 network_satellite:5.3::el5 cobbler 0:1.6.6-15.el5sat
Red Hat · Network Satellite 5 network_satellite:5.3::el5 cobbler-debuginfo 0:1.6.6-15.el5sat

Vulnerabilities 1

  • High —
    CVE-2010-2235

    Cobbler is vulnerable to code injection

    template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated adminis…

    cobbler PyPI

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=607662
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0775.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2235
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2235
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2235