-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4159-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : remctl CVE ID : CVE-2018-0493 Santosh Ananthakrishnan discovered a use-after-free in remctl, a server for Kerberos-authenticated command execution. If the command is configured with the sudo option, this could potentially result in the execution of arbitrary code. The oldstable distribution (jessie) is not affected. For the stable distribution (stretch), this problem has been fixed in version 3.13-1+deb9u1. We recommend that you upgrade your remctl packages. For the detailed security status of remctl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/remctl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlrAzDcACgkQEMKTtsN8 Tjbe1g//UKvSloubA43PXF4z14g1Psi8nFFUL2XzcP6KMV+EJgoCSluuPniQb0vZ /b5dAQ65UCC5TC2dy22jWkXInPPxlD821snq5G5Fs4+XZK5n9B5K8miNZekuMDGS zfjCAEStr7ibpnHoRw/aabXvCSz9ASKRW1ROwsUPldmjt4d23I80KZ2C9K1g/hul QUbDbQ7bRCATKA93kTtfQy/rvr78GDQdI1CUEP/92EZWUJpNiSqpvYrmN/RZtJ4W hwP5NqYPxPsX1fDdOuyjxGJOc5d70i6Zjma8XfDThKQdvOkQtbRAOrGbzTv709s+ u0L7pQnBPHBkuKY3Te+fCYw/AtxdpzgxT+7vwKsWLqjJ1IMoFkzrZnHZVWYEh2Oq YE17MifHBGQ7YBEy2DewsgfNRWYmvMmRn1zL5DvV9H0RoagJ/CdVboHqgVWLdKXy /nQqw/xQhuHfeoGcudDBrFbDJ8QMJBnk37P9Y688gszSQqHqzEblnmqpYd4qcCDD /DQrB4lmPcQkMXfmRX01AQ4Fmx4/unKRx4RDt9uNoFbzr1OmFPaOPDgZLEsGvOJv znRDX85GvdQsKZCxninQX2yLrDwt6eJjkqtNqwQQ6CNwMfJtc7gj3pvJ1tczXh4E UOSNcgiOYgGkVlefiG8TcNQIylqweOdHuByOM/aZdA7N1/ZGyVs= =YS2S -----END PGP SIGNATURE-----
