tocsin

Debian/oar: high 8.8

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.

Action: Upgrade oar to 2.5.7-1 or later.

Affected

introducedfixedlast affected
02.5.7-1-

Fixed versions

2.5.7-1

Sources

published · modified · JSON