Date: Wed, 16 Jan 2013 21:42:26 +0100 From: Salvatore Bonaccorso <carnil@...ian.org> To: oss-security@...ts.openwall.com Subject: bcron: cron jobs get access to the temporary output files from all other jobs that are still running Hi I haven't found if there was already a request for this. In Debian Bugtracker it was closed  today. It is possible due to a bug in bcron-exec that cron jobs get access to the temporary output files from other jobs that are still running. This is also mentioned in upstream's NEWS. The commit to fix this on github should be. Even it looks bcron is not broadly used, could the above get a CVE? : http://bugs.debian.org/686650 : http://untroubled.org/bcron/NEWS : https://github.com/bruceg/bcron/commit/7e3b8d7a82a6712f4607aae151a3ba8843dc6c86 Regards, Salvatore
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.