RHSA-2008:0911Medium
Red Hat Security Advisory: condor security, bug fix and enhancement update
🔗 CVE IDs covered (4)
📋 Description
CVE-2008-3826 — condor: users can run jobs with arbitrary owners CVE-2008-3828 — condor: buffer overflow in lookup_macro CVE-2008-3829 — condor: denial of service attack on Schedd via corrupt logfile CVE-2008-3830 — condor: allow or deny with overlapping netmasks may be ignored
🎯 Affected products16
- MRG Grid Execute Node for RHEL 5 Server
- MRG Grid for RHEL 5 Server
- condor-0:7.0.5-2.el5.i386 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-0:7.0.5-2.el5.i386 as a component of MRG Grid for RHEL 5 Server
- condor-0:7.0.5-2.el5.src as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-0:7.0.5-2.el5.src as a component of MRG Grid for RHEL 5 Server
- condor-0:7.0.5-2.el5.x86_64 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-0:7.0.5-2.el5.x86_64 as a component of MRG Grid for RHEL 5 Server
- condor-debuginfo-0:7.0.5-2.el5.i386 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-debuginfo-0:7.0.5-2.el5.i386 as a component of MRG Grid for RHEL 5 Server
- condor-debuginfo-0:7.0.5-2.el5.x86_64 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-debuginfo-0:7.0.5-2.el5.x86_64 as a component of MRG Grid for RHEL 5 Server
- condor-static-0:7.0.5-2.el5.i386 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-static-0:7.0.5-2.el5.i386 as a component of MRG Grid for RHEL 5 Server
- condor-static-0:7.0.5-2.el5.x86_64 as a component of MRG Grid Execute Node for RHEL 5 Server
- condor-static-0:7.0.5-2.el5.x86_64 as a component of MRG Grid for RHEL 5 Server
✅ Remediation
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2008:0911
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttp://cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=451069
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=451799
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=462662
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=463987
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=463990
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=463995
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=463997
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0911.json