Debian Linux Security Advisory 2302-1 - It has been discovered that the bcfg2 server, a configuration management server for bcfg2 clients, is not properly sanitizing input from bcfg2 clients before passing it to various shell commands. This enables an attacker in control of a bcfg2 client to execute arbitrary commands on the server with root privileges.
55efb7a2128a1ef35890d6ea654ca071a81a08262593a044dc09efca187277b6