A vulnerability in Bacula may allow remote attackers to obtain sensitive information.
|Package||app-backup/bacula on all architectures|
|Affected versions||< 5.2.12|
|Unaffected versions||>= 5.2.12|
Bacula is a network based backup suite.
Bacula does not properly enforce console access control lists.
A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information.
There is no known workaround at this time.
All Bacula users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-backup/bacula-5.2.12"
May 17, 2014
May 17, 2014: 1