openSUSE Security Update : cronie (openSUSE-SU-2013:0205-1)

Fix Bug 786096 - cron: does not close file descriptors before invocation of commands - bug-786096cronie-fdleak.diff CVE-2012-6097 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Mandriva Linux Security Advisory : cronie (MDVSA-2013:033)

Updated cronie package fixes the following issue : It was reported that cronie 1.4.8 would leak certain file descriptors. On systems where /etc/crontab is not world-readable this could be an information disclosure concern CVE-2012-6097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2012-6097

CVE-2012-6097 concerns a file descriptor leak in cronie 1.4.8 that, in certain environments, could let local users read restricted files (demonstrated via /etc/crontab). The issue is caused by cronie leaking FDs, enabling information disclosure. Affected product is cronie 1.4.8; impact is local d...