Description
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | condor +5 | 7.8.8-0.4.1.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | condor-ec2-enhanced | 1.3.0-2.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | condor-job-hooks +1 | 1.5-6.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | condor-low-latency | 1.2-3.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | condor-plumage +2 | 7.8.8-0.4.1.el6 | RHSA-2013:0565 |
| Red Hat MRG 2 | condor-wallaby +4 | 5.0.5-2.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | condor-wallaby-base-db | 1.25-1.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | cumin | 0.1.5675-1.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | deltacloud-core +2 | 0.5.0-11.el6cf | RHSA-2013:0565 |
| Red Hat MRG 2 | python-boto | 2.3.0-1.1.el5 | RHSA-2013:0564 |
| Red Hat MRG 2 | python-condorec2e +1 | 1.3.0-3.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | ruby-nokogiri +2 | 1.5.0-0.9.beta4.el6cf | RHSA-2013:0565 |
| Red Hat MRG 2 | ruby-rhubarb | 0.4.3-5.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | rubygem-rack | 1:1.3.0-3.el6cf | RHSA-2013:0565 |
| Red Hat MRG 2 | sesame | 1.0-7.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | spqr-gen +1 | 0.3.6-3.el5 | RHSA-2013:0565, RHSA-2013:0564 |
| Red Hat MRG 2 | wallaby +3 | 0.16.3-1.el5 | RHSA-2013:0565, RHSA-2013:0564 |
Advisories 2
- RHSA-2013:0564 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.3 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:0565 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.3 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026