Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Secure with the Latest Linux Advisories

Debian Large Esm H800
Debian

Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H800
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 7 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 30: FEDORA-2020-ae934f6790 Critical Access Control Issue in Condor

Update to latest upstream 8.8.8 . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-ae934f6790 2020-05-17 03:19:15.181759 -------------------------------------------------------------------------------- Name : condor Product : Fedora 30 Version : 8.8.8 Release : 1.fc30 URL : https://research.cs.wisc.edu/htcondor/ Summary : HTCondor: High Throughput Computing Description : HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to HTCondor, HTCondor places them into a queue, chooses when and where to run the jobs based upon a policy, carefully monitors their progress, and ultimately informs the user upon completion. -------------------------------------------------------------------------------- Update Information: Update to latest upstream 8.8.8 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 9 2020 Tim Theisen - 8.8.8-1 - Update to latest upstream 8.8.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1822525 - Security issues in Condor < 8.8.8 https://bugzilla.redhat.com/show_bug.cgi?id=1822525 [ 2 ] Bug #1828437 - CVE-2019-18823 condor: htcondor: Incorrect access control in condor_startd [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1828437 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-ae934f6790' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packagesare signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Discover the essential updates in Condor 8.8.8 for Fedora 30, featuring job management improvements, user interface enhancements, and vital security fixes. Fedora 30, Condor 8.8.8, High Throughput Computing. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 16, 2020 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticalcode execution

Debian: DSA-3149-1 Critical: Condor Code Execution Threat

Florian Weimer, of Red Hat Product Security, discovered an issue in condor, a distributed workload management system. Upon job completion, it can optionally notify a user by sending an email; the mailx invocation used in that process allowed for any authenticated user . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3149-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Sebastien Delafond February 02, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : condor CVE ID : CVE-2014-8126 Debian Bug : 775276 Florian Weimer, of Red Hat Product Security, discovered an issue in condor, a distributed workload management system. Upon job completion, it can optionally notify a user by sending an email; the mailx invocation used in that process allowed for any authenticated user able to submit jobs, to execute arbitrary code with the privileges of the condor user. For the stable distribution (wheezy), this problem has been fixed in version 7.8.2~dfsg.1-1+deb7u3. For the upcoming stable distribution (jessie) and unstable distribution (sid), this problem has been fixed in version 8.2.3~dfsg.1-6. We recommend that you upgrade your condor packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Notice DSA-3150-1 addresses a vulnerability in the samba package that may permit unauthorized access to system files.. Debian Security Advisory, Condor Management System, Code Execution Threat. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 02, 2015 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorycode executionimportant

CentOS: CSRF-2021:0171-02 Critical: Application Remote Manipulation

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: condor security update Advisory ID: RHSA-2015:0035-01 Product: Red Hat Enterprise MRG for RHEL-6 Advisory URL: https://access.redhat.com/errata/RHSA-2015:0035.html Issue date: 2015-01-12 CVE Names: CVE-2014-8126 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 6 ComputeNode v.2 - x86_64 MRG Grid Execute Node for RHEL 6 Server v.2 - i386, x86_64 MRG Grid for RHEL 6 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user. (CVE-2014-8126) This issue was discovered by Florian Weimer of Red Hat Product Security. All Red Hat Enterprise MRG 2.5 users are advised to upgrade to these updated packages, which contain a backportedpatch to correct this issue. HTCondor must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169800 - CVE-2014-8126 condor: mailx invocation enables code execution as condor user 6. Package List: MRG Grid Execute Node for RHEL 6 ComputeNode v.2: Source: condor-7.8.10-0.2.el6.src.rpm x86_64: condor-7.8.10-0.2.el6.x86_64.rpm condor-classads-7.8.10-0.2.el6.x86_64.rpm condor-debuginfo-7.8.10-0.2.el6.x86_64.rpm condor-kbdd-7.8.10-0.2.el6.x86_64.rpm condor-qmf-7.8.10-0.2.el6.x86_64.rpm condor-vm-gahp-7.8.10-0.2.el6.x86_64.rpm MRG Grid for RHEL 6 Server v.2: Source: condor-7.8.10-0.2.el6.src.rpm i386: condor-7.8.10-0.2.el6.i686.rpm condor-aviary-7.8.10-0.2.el6.i686.rpm condor-classads-7.8.10-0.2.el6.i686.rpm condor-cluster-resource-agent-7.8.10-0.2.el6.i686.rpm condor-debuginfo-7.8.10-0.2.el6.i686.rpm condor-kbdd-7.8.10-0.2.el6.i686.rpm condor-plumage-7.8.10-0.2.el6.i686.rpm condor-qmf-7.8.10-0.2.el6.i686.rpm x86_64: condor-7.8.10-0.2.el6.x86_64.rpm condor-aviary-7.8.10-0.2.el6.x86_64.rpm condor-classads-7.8.10-0.2.el6.x86_64.rpm condor-cluster-resource-agent-7.8.10-0.2.el6.x86_64.rpm condor-debuginfo-7.8.10-0.2.el6.x86_64.rpm condor-deltacloud-gahp-7.8.10-0.2.el6.x86_64.rpm condor-kbdd-7.8.10-0.2.el6.x86_64.rpm condor-plumage-7.8.10-0.2.el6.x86_64.rpm condor-qmf-7.8.10-0.2.el6.x86_64.rpm condor-vm-gahp-7.8.10-0.2.el6.x86_64.rpm MRG Grid Execute Node for RHEL 6 Serverv.2: Source: condor-7.8.10-0.2.el6.src.rpm i386: condor-7.8.10-0.2.el6.i686.rpm condor-classads-7.8.10-0.2.el6.i686.rpm condor-debuginfo-7.8.10-0.2.el6.i686.rpm condor-kbdd-7.8.10-0.2.el6.i686.rpm condor-qmf-7.8.10-0.2.el6.i686.rpm x86_64: condor-7.8.10-0.2.el6.x86_64.rpm condor-classads-7.8.10-0.2.el6.x86_64.rpm condor-debuginfo-7.8.10-0.2.el6.x86_64.rpm condor-kbdd-7.8.10-0.2.el6.x86_64.rpm condor-qmf-7.8.10-0.2.el6.x86_64.rpm condor-vm-gahp-7.8.10-0.2.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-8126 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUtC/IXlSAg2UNWIIRAnhvAKCx5u4B4k/qA8ozkWmS2ykpQZK2xwCgvz8s HSCecKv8mExZxlMX3KNDLf0=vY7W -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical security enhancement for condor packages targeting vulnerabilities in Red Hat MRG 2.5. Users are encouraged to upgrade.. condor update, Red Hat security impact, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 12, 2015 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysoftware updateimportant

Red Hat Enterprise MRG 2.5 RHSA-2015-0036 Important condor Exploit Fix

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: condor security update Advisory ID: RHSA-2015:0036-01 Product: Red Hat Enterprise MRG for RHEL-5 Advisory URL: https://access.redhat.com/errata/RHSA-2015:0036.html Issue date: 2015-01-12 CVE Names: CVE-2014-8126 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 5 Server v.2 - i386, x86_64 MRG Grid for RHEL 5 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user. (CVE-2014-8126) This issue was discovered by Florian Weimer of Red Hat Product Security. All Red Hat Enterprise MRG 2.5 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restartedfor the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169800 - CVE-2014-8126 condor: mailx invocation enables code execution as condor user 6. Package List: MRG Grid for RHEL 5 Server v.2: Source: condor-7.8.9-0.11.el5.src.rpm i386: condor-7.8.9-0.11.el5.i386.rpm condor-aviary-7.8.9-0.11.el5.i386.rpm condor-classads-7.8.9-0.11.el5.i386.rpm condor-debuginfo-7.8.9-0.11.el5.i386.rpm condor-kbdd-7.8.9-0.11.el5.i386.rpm condor-qmf-7.8.9-0.11.el5.i386.rpm condor-vm-gahp-7.8.9-0.11.el5.i386.rpm x86_64: condor-7.8.9-0.11.el5.x86_64.rpm condor-aviary-7.8.9-0.11.el5.x86_64.rpm condor-classads-7.8.9-0.11.el5.x86_64.rpm condor-debuginfo-7.8.9-0.11.el5.x86_64.rpm condor-kbdd-7.8.9-0.11.el5.x86_64.rpm condor-qmf-7.8.9-0.11.el5.x86_64.rpm condor-vm-gahp-7.8.9-0.11.el5.x86_64.rpm MRG Grid Execute Node for RHEL 5 Server v.2: Source: condor-7.8.9-0.11.el5.src.rpm i386: condor-7.8.9-0.11.el5.i386.rpm condor-classads-7.8.9-0.11.el5.i386.rpm condor-debuginfo-7.8.9-0.11.el5.i386.rpm condor-kbdd-7.8.9-0.11.el5.i386.rpm condor-qmf-7.8.9-0.11.el5.i386.rpm condor-vm-gahp-7.8.9-0.11.el5.i386.rpm x86_64: condor-7.8.9-0.11.el5.x86_64.rpm condor-classads-7.8.9-0.11.el5.x86_64.rpm condor-debuginfo-7.8.9-0.11.el5.x86_64.rpm condor-kbdd-7.8.9-0.11.el5.x86_64.rpm condor-qmf-7.8.9-0.11.el5.x86_64.rpm condor-vm-gahp-7.8.9-0.11.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-8126 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUtDAYXlSAg2UNWIIRAh8LAKCF3BpUsAYQeBT56EVudos+QCQD1ACeO0Yg OoCVfyQ/XCeeAtyF0kwyYFk=I2ce -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial patch roll-out initiated for Red Hat Enterprise MRG 2.5 to address severe condor vulnerability compromising operational integrity.. Red Hat Security, Condor Security, HTCondor Update, RHEL MRG, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 12, 2015 •Important Red Hat
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatupdate

Red Hat: RHSA-2015:0036-01 Important: Condor Code Execution Risk

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: condor security update Advisory ID: RHSA-2015:0036-01 Product: Red Hat Enterprise MRG for RHEL-5 Advisory URL: https://access.redhat.com/errata/RHSA-2015:0036.html Issue date: 2015-01-12 CVE Names: CVE-2014-8126 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 5 Server v.2 - i386, x86_64 MRG Grid for RHEL 5 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user. (CVE-2014-8126) This issue was discovered by Florian Weimer of Red Hat Product Security. All Red Hat Enterprise MRG 2.5 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously releasederrata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169800 - CVE-2014-8126 condor: mailx invocation enables code execution as condor user 6. Package List: MRG Grid for RHEL 5 Server v.2: Source: condor-7.8.9-0.11.el5.src.rpm i386: condor-7.8.9-0.11.el5.i386.rpm condor-aviary-7.8.9-0.11.el5.i386.rpm condor-classads-7.8.9-0.11.el5.i386.rpm condor-debuginfo-7.8.9-0.11.el5.i386.rpm condor-kbdd-7.8.9-0.11.el5.i386.rpm condor-qmf-7.8.9-0.11.el5.i386.rpm condor-vm-gahp-7.8.9-0.11.el5.i386.rpm x86_64: condor-7.8.9-0.11.el5.x86_64.rpm condor-aviary-7.8.9-0.11.el5.x86_64.rpm condor-classads-7.8.9-0.11.el5.x86_64.rpm condor-debuginfo-7.8.9-0.11.el5.x86_64.rpm condor-kbdd-7.8.9-0.11.el5.x86_64.rpm condor-qmf-7.8.9-0.11.el5.x86_64.rpm condor-vm-gahp-7.8.9-0.11.el5.x86_64.rpm MRG Grid Execute Node for RHEL 5 Server v.2: Source: condor-7.8.9-0.11.el5.src.rpm i386: condor-7.8.9-0.11.el5.i386.rpm condor-classads-7.8.9-0.11.el5.i386.rpm condor-debuginfo-7.8.9-0.11.el5.i386.rpm condor-kbdd-7.8.9-0.11.el5.i386.rpm condor-qmf-7.8.9-0.11.el5.i386.rpm condor-vm-gahp-7.8.9-0.11.el5.i386.rpm x86_64: condor-7.8.9-0.11.el5.x86_64.rpm condor-classads-7.8.9-0.11.el5.x86_64.rpm condor-debuginfo-7.8.9-0.11.el5.x86_64.rpm condor-kbdd-7.8.9-0.11.el5.x86_64.rpm condor-qmf-7.8.9-0.11.el5.x86_64.rpm condor-vm-gahp-7.8.9-0.11.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2014-8126 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. . Urgent HTCondor securitypatch for Red Hat Enterprise MRG. Upgrade suggested to address potential code injection vulnerability.. HTCondor Security Update, Red Hat Advisory, Important Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 12, 2015 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatedenial of service

Oracle ORCL-2023:4532-04 Minor Update: Fixes for VM Bugs Released

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: condor security update Advisory ID: RHSA-2013:1172-01 Product: Red Hat Enterprise MRG for RHEL-6 Advisory URL: https://access.redhat.com/errata/RHSA-2013:1172.html Issue date: 2013-08-21 CVE Names: CVE-2013-4255 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 6 ComputeNode v.2 - x86_64 MRG Grid Execute Node for RHEL 6 Server v.2 - i386, x86_64 MRG Grid for RHEL 6 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A denial of service flaw was found in the way HTCondor's policy definition evaluator processed certain policy definitions. If an administrator used an attribute defined on a job in a CONTINUE, KILL, PREEMPT, or SUSPEND condor_startd policy, a remote HTCondor service user could use this flaw to cause condor_startd to exit by submitting a job that caused such a policy definition to be evaluated to either the ERROR or UNDEFINEDstates. (CVE-2013-4255) Note: This issue did not affect the default HTCondor configuration. This issue was found by Matthew Farrellee of Red Hat. All Red Hat Enterprise MRG 2.3 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 919401 - CVE-2013-4255 condor: condor_startd DoS when parsing policy definition that evaluates to ERROR or UNDEFINED 6. Package List: MRG Grid Execute Node for RHEL 6 ComputeNode v.2: Source: x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm MRG Grid for RHEL 6 Server v.2: Source: i386: condor-7.8.8-0.4.3.el6_4.i686.rpm condor-aviary-7.8.8-0.4.3.el6_4.i686.rpm condor-classads-7.8.8-0.4.3.el6_4.i686.rpm condor-cluster-resource-agent-7.8.8-0.4.3.el6_4.i686.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.i686.rpm condor-kbdd-7.8.8-0.4.3.el6_4.i686.rpm condor-plumage-7.8.8-0.4.3.el6_4.i686.rpm condor-qmf-7.8.8-0.4.3.el6_4.i686.rpm x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-aviary-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-cluster-resource-agent-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-deltacloud-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-plumage-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm MRG Grid Execute Node for RHEL 6 Serverv.2: Source: i386: condor-7.8.8-0.4.3.el6_4.i686.rpm condor-classads-7.8.8-0.4.3.el6_4.i686.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.i686.rpm condor-kbdd-7.8.8-0.4.3.el6_4.i686.rpm condor-qmf-7.8.8-0.4.3.el6_4.i686.rpm x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2013-4255 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFSFQc3XlSAg2UNWIIRAjvLAKCtYyosQAnDQ330DRllg6fJS2wSpwCfVMO4 qUfx9nEh6Qh5/CrMjxPsMEs=CxfN -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Newly released condor updates rectify a significant security vulnerability in Red Hat Enterprise MRG 2.3. Immediate attention is necessary.. Red Hat Enterprise MRG, Condor Packages, Security Updates. . LinuxSecurity.com Team

Calendar%202 Aug 21, 2013 Red Hat
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatupdate

Red Hat RHEL 5: RHSA-2013:1171-01 Moderate: Condor DoS Risk

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: condor security update Advisory ID: RHSA-2013:1171-01 Product: Red Hat Enterprise MRG for RHEL-5 Advisory URL: https://access.redhat.com/errata/RHSA-2013:1171.html Issue date: 2013-08-21 CVE Names: CVE-2013-4255 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 5 Server v.2 - i386, x86_64 MRG Grid for RHEL 5 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A denial of service flaw was found in the way HTCondor's policy definition evaluator processed certain policy definitions. If an administrator used an attribute defined on a job in a CONTINUE, KILL, PREEMPT, or SUSPEND condor_startd policy, a remote HTCondor service user could use this flaw to cause condor_startd to exit by submitting a job that caused such a policy definition to be evaluated to either the ERROR or UNDEFINED states. (CVE-2013-4255) Note: This issue did not affect the default HTCondor configuration. This issue was found by Matthew Farrellee of Red Hat. All Red Hat Enterprise MRG 2.3users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 919401 - CVE-2013-4255 condor: condor_startd DoS when parsing policy definition that evaluates to ERROR or UNDEFINED 6. Package List: MRG Grid for RHEL 5 Server v.2: Source: i386: condor-7.8.8-0.4.2.el5_9.i386.rpm condor-aviary-7.8.8-0.4.2.el5_9.i386.rpm condor-classads-7.8.8-0.4.2.el5_9.i386.rpm condor-debuginfo-7.8.8-0.4.2.el5_9.i386.rpm condor-kbdd-7.8.8-0.4.2.el5_9.i386.rpm condor-qmf-7.8.8-0.4.2.el5_9.i386.rpm condor-vm-gahp-7.8.8-0.4.2.el5_9.i386.rpm x86_64: condor-7.8.8-0.4.2.el5_9.x86_64.rpm condor-aviary-7.8.8-0.4.2.el5_9.x86_64.rpm condor-classads-7.8.8-0.4.2.el5_9.x86_64.rpm condor-debuginfo-7.8.8-0.4.2.el5_9.x86_64.rpm condor-kbdd-7.8.8-0.4.2.el5_9.x86_64.rpm condor-qmf-7.8.8-0.4.2.el5_9.x86_64.rpm condor-vm-gahp-7.8.8-0.4.2.el5_9.x86_64.rpm MRG Grid Execute Node for RHEL 5 Server v.2: Source: i386: condor-7.8.8-0.4.2.el5_9.i386.rpm condor-classads-7.8.8-0.4.2.el5_9.i386.rpm condor-debuginfo-7.8.8-0.4.2.el5_9.i386.rpm condor-kbdd-7.8.8-0.4.2.el5_9.i386.rpm condor-qmf-7.8.8-0.4.2.el5_9.i386.rpm condor-vm-gahp-7.8.8-0.4.2.el5_9.i386.rpm x86_64: condor-7.8.8-0.4.2.el5_9.x86_64.rpm condor-classads-7.8.8-0.4.2.el5_9.x86_64.rpm condor-debuginfo-7.8.8-0.4.2.el5_9.x86_64.rpm condor-kbdd-7.8.8-0.4.2.el5_9.x86_64.rpm condor-qmf-7.8.8-0.4.2.el5_9.x86_64.rpm condor-vm-gahp-7.8.8-0.4.2.el5_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7.References: https://access.redhat.com/security/cve/CVE-2013-4255 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. . A significant Red Hat security notice highlights a critical DoS vulnerability found in condor packages for RHEL 5. Prompt upgrades are strongly advised.. condor security update, Red Hat MRG, DoS flaw fix, RHEL 5 advisory. . LinuxSecurity.com Team

Calendar%202 Aug 21, 2013 Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorydenial of serviceRed Hat Enterprise

Red Hat: RHSA-2013:1172-01 Moderate: Condor DoS Security Update

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: condor security update Advisory ID: RHSA-2013:1172-01 Product: Red Hat Enterprise MRG for RHEL-6 Advisory URL: https://access.redhat.com/errata/RHSA-2013:1172.html Issue date: 2013-08-21 CVE Names: CVE-2013-4255 ==================================================================== 1. Summary: Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: MRG Grid Execute Node for RHEL 6 ComputeNode v.2 - x86_64 MRG Grid Execute Node for RHEL 6 Server v.2 - i386, x86_64 MRG Grid for RHEL 6 Server v.2 - i386, x86_64 3. Description: HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A denial of service flaw was found in the way HTCondor's policy definition evaluator processed certain policy definitions. If an administrator used an attribute defined on a job in a CONTINUE, KILL, PREEMPT, or SUSPEND condor_startd policy, a remote HTCondor service user could use this flaw to cause condor_startd to exit by submitting a job that caused such a policy definition to be evaluated to either the ERROR or UNDEFINED states. (CVE-2013-4255) Note: This issue did not affect the default HTCondor configuration. This issue was found by MatthewFarrellee of Red Hat. All Red Hat Enterprise MRG 2.3 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 919401 - CVE-2013-4255 condor: condor_startd DoS when parsing policy definition that evaluates to ERROR or UNDEFINED 6. Package List: MRG Grid Execute Node for RHEL 6 ComputeNode v.2: Source: x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm MRG Grid for RHEL 6 Server v.2: Source: i386: condor-7.8.8-0.4.3.el6_4.i686.rpm condor-aviary-7.8.8-0.4.3.el6_4.i686.rpm condor-classads-7.8.8-0.4.3.el6_4.i686.rpm condor-cluster-resource-agent-7.8.8-0.4.3.el6_4.i686.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.i686.rpm condor-kbdd-7.8.8-0.4.3.el6_4.i686.rpm condor-plumage-7.8.8-0.4.3.el6_4.i686.rpm condor-qmf-7.8.8-0.4.3.el6_4.i686.rpm x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-aviary-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-cluster-resource-agent-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-deltacloud-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-plumage-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm MRG Grid Execute Node for RHEL 6 Serverv.2: Source: i386: condor-7.8.8-0.4.3.el6_4.i686.rpm condor-classads-7.8.8-0.4.3.el6_4.i686.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.i686.rpm condor-kbdd-7.8.8-0.4.3.el6_4.i686.rpm condor-qmf-7.8.8-0.4.3.el6_4.i686.rpm x86_64: condor-7.8.8-0.4.3.el6_4.x86_64.rpm condor-classads-7.8.8-0.4.3.el6_4.x86_64.rpm condor-debuginfo-7.8.8-0.4.3.el6_4.x86_64.rpm condor-kbdd-7.8.8-0.4.3.el6_4.x86_64.rpm condor-qmf-7.8.8-0.4.3.el6_4.x86_64.rpm condor-vm-gahp-7.8.8-0.4.3.el6_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2013-4255 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. . Red Hat Security Advisory Synopsis: Moderate: condor security update Advisory ID: RHSA-2013:1172-01 . updated, condor, packages, security, enterprise. . LinuxSecurity.com Team

Calendar%202 Aug 21, 2013 Red Hat
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics