Red Hat Security AdvisoryRHSA-2013:0565
Red Hat Enterprise MRG Grid 2.3 security update
Released 2013-03-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.8.8-0.4.1.el6, condor-classads-7.8.8-0.4.1.el6, condor-job-hooks-1.5-6.el6 +17
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.8.8-0.4.1.el6, condor-classads-7.8.8-0.4.1.el6, condor-ec2-enhanced-1.3.0-2.el6 +20
- Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.8.8-0.4.1.el6, condor-aviary-7.8.8-0.4.1.el6, condor-classads-7.8.8-0.4.1.el6 +34
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 sesame-1.0-8.el6
- Red Hat MRG Management for RHEL 6 Server v.2 cumin-0.1.5675-1.el6, python-wallaby-0.16.3-1.el6, sesame-1.0-8.el6 +1
- Red Hat MRG Messaging for RHEL 6 Server v.2 sesame-1.0-8.el6
Fixes 1 record
Priority LOW 24
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02267 · Published 2013-03-12 · Partial fix CWE-20
