File _patchinfo of Package patchinfo.10654

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.10654

<patchinfo incident="10654">
  <issue tracker="bnc" id="1128937">VUL-1: CVE-2019-9704: cron,cronie: vixie-cron: calloc return value resulting in remote dos</issue>
  <issue tracker="bnc" id="1128935">VUL-1: CVE-2019-9705: cron,cronie: dos(memory consumption) via a large crontab file</issue>
  <issue tracker="bnc" id="1130746">Cron schedules only one job of crontab</issue>
  <issue id="1133100" tracker="bnc">Manual start of cron is possible even when it's already started using systemd</issue>
  <issue tracker="cve" id="2019-9704"/>
  <issue tracker="cve" id="2019-9705"/>
  <category>security</category>
  <rating>low</rating>
  <packager>kstreitova</packager>
  <description>This update for cronie fixes the following issues:

Security issues fixed:

- CVE-2019-9704: Fixed an insufficient check in the return value of calloc which
  could allow a local user to create Denial of Service by crashing the daemon (bsc#1128937).
- CVE-2019-9705: Fixed an implementation vulnerability which could allow a local user to
  exhaust the memory resulting in Denial of Service (bsc#1128935).

Bug fixes:

- Manual start of cron is possible even when it's already started using systemd (bsc#1133100).
- Cron schedules only one job of crontab (bsc#1130746).
</description>
  <summary>Security update for cronie</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.10654

Places