From Mageia wiki
Jump to: navigation, search

MGASA-2012-0254

Date: September 4th, 2012
Affected releases: 2


Description:
Updated torque packages fix security vulnerability:

Bartlomiej Balcerek discovered several buffer overflows in TORQUE
server, a PBS-derived batch processing server. This allows an attacker
to crash the service or execute arbitrary code with privileges of the
server via crafted job or host names (CVE-2011-2193).

Additionally, permissions problems that caused pbs_server, pbs_sched,
and pbs_mom to fail to load have been corrected.


Updated Packages:
torque-2.5.12-1.mga2
torque-client-2.5.12-1.mga2
torque-gui-2.5.12-1.mga2
torque-mom-2.5.12-1.mga2
torque-sched-2.5.12-1.mga2
torque-server-2.5.12-1.mga2
lib(64)torque2-2.5.12-1.mga2
lib(64)torque-devel-2.5.12-1.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2193
http://www.debian.org/security/2011/dsa-2329
https://bugs.mageia.org/show_bug.cgi?id=6082