Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

roundup: privilege escalation

Package(s):

roundup

CVE #(s):

Created:

March 11, 2009

Updated:

April 10, 2009

Description:

Any authenticated roundup users who is able to create and edit queries is able to edit any queries on the system, regardless of ownership. See this bug report for more information.

Alerts:

Debian	DSA-1754-1	2009-04-09
Fedora	FEDORA-2009-2583	2009-03-11
Fedora	FEDORA-2009-2591	2009-03-11

(Log in to post comments)