bacula-1.34.0 has a race condition when backing up multiple hosts: major race condition in the job scheduler when multiple simultaneous jobs is enabled. This occurred only when on job had blocked another because of resource usage. This caused a deadlock and CPU usage. Reproducible: Always Steps to Reproduce: 1. Schedule multiple jobs at the same time 2. Let them run Actual Results: bacula-dir will race after the first backup job completes this bug is fixed in bacula-1.34.1
I have added 1.34.1 and removed 1.34.0. 1.34.0 wasnt marked stable so neither was 1.34.1.
Reassigning bug to security@ for further processing. Adding arches from KEYWORDS="~x86 ~ppc ~sparc" Bryn Hughes Please provide a URL to your source of information on this. zul, Anything your aware of that would prevent this package from going stable?
Nope, i just marked it stable for x86.
It's in the Changelog for Bacula-1.34.1 which can be found here: http://cvs.sourceforge.net/viewcvs.py/*checkout*/bacula/bacula/ChangeLog?content-type=text%2Fplain&rev=1.120 Look under April 18 2004
Stable on sparc (though we didn't have a stable release before).
With regards to the specific versions affected, I believe this bug ONLY affects 1.34.0, there were quite a few changes between 1.32 and 1.34. From further testing I believe this bug is only triggered when a SpoolDevice is defined and enabled - this feature only exists in >=bacula-1.34.0. <bacula-1.34.0 should NOT be affected by this bug.
We don't really need ppc stable as it was never stable on ppc anyway, so bacula-1.34.1 is ready for a GLSA, but I'm not sure one is needed... -K
this is more of a bug than a security vulnerability. I don't think a glsa is needed in this particular case. closing as fixed.