Critical severity

Critical Security Update for Issabel

An automated attack campaign targeting Issabel servers is currently active. All administrators must install the available update immediately.

Your server may be at risk

The vulnerability may allow an attacker to remotely take control of the system and install persistent malicious software, including rootkits. This can compromise the server, its communications, and stored information. The update fixes the issue currently being used in these attacks.

Update now

Update instructions

Open the server console or terminal, identify the installed version, and run only the corresponding command.

Issabel 4 users

Version 4

Run the following command from the server console or terminal:

yum --disablerepo=* --enablerepo=issabel-updates update issabel-framework

Issabel 5 users

Version 5

Run the following command from the server console or terminal:

yum --disablerepo=* --enablerepo=issabel-cinco-updates update issabel-framework

After updating

Recommended actions

Review recent access and calls that you do not recognize.
Avoid exposing the server directly to the Internet.
Change administrative credentials if you suspect unauthorized access.
Use only official repositories and channels.

Important for potentially compromised systems The update prevents new exploitation of this vulnerability, but it does not remove malicious software that may have been installed previously. If you detect unknown activity or unauthorized changes, isolate the server from the Internet and request a specialized security review.