Vulnerability Bulletins |
DSA-3149 condor - security update |
|
| Affected software | Debian |
|
Florian Weimer, of Red Hat Product Security, discovered an issue incondor, a distributed workload management system. Upon job completion,it can optionally notify a user by sending an email; the mailxinvocation used in that process allowed for any authenticated userable to submit jobs, to execute arbitrary code with the privileges ofthe condor user. More info: https://www.debian.org/security/2015/dsa-3149 |
|