Differences

This shows you the differences between two versions of the page.

--- oar_2.5.7 [2016/04/07 17:01] – neyron
+++ oar_2.5.7 [2016/04/07 17:04] – neyron
@@ Line 6: / Line 6: @@
 ===== Forword =====
-Thanks to Emmanuel Thomé, a **vulnerability** was discovered in OAR, which affects all previous versions of OAR. This vulnerability allows any user of a cluster managed by OAR to read parts of data which are not supposed to be readable by the user. This vulnerability could eventually be exploited to gain root privileges on the cluster. It is in particular known to eventually allow one to disclose private ssh keys (CVE-2016-1235).
+Thanks to Emmanuel Thomé, a **vulnerability** was discovered in OAR, which affects all previous versions of OAR. This vulnerability allows any user of a cluster managed by OAR to read parts of data which are not supposed to be readable by the user. This vulnerability might be exploited to gain root privileges on the cluster. It is in particular known to eventually allow one to disclose part of private ssh keys (CVE-2016-1235).
 **OAR 2.5.7 fixes this vulnerability. Upgrading is highly recommended.**