Comment 0 for bug 1742098

Detailed bug description:

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

Fuel node ships with Cobbler used for cloud deployment purposes. Although Cobber API is not meant to use over the network from Fuel node we need to provide updated Cobbler packages for Fuel.

https://github.com/cobbler/cobbler/issues/1845