Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 30: FEDORA-2020-ae934f6790 Critical Access Control Issue in Condor

Update to latest upstream 8.8.8 . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-ae934f6790 2020-05-17 03:19:15.181759 -------------------------------------------------------------------------------- Name : condor Product : Fedora 30 Version : 8.8.8 Release : 1.fc30 URL : https://research.cs.wisc.edu/htcondor/ Summary : HTCondor: High Throughput Computing Description : HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to HTCondor, HTCondor places them into a queue, chooses when and where to run the jobs based upon a policy, carefully monitors their progress, and ultimately informs the user upon completion. -------------------------------------------------------------------------------- Update Information: Update to latest upstream 8.8.8 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 9 2020 Tim Theisen - 8.8.8-1 - Update to latest upstream 8.8.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1822525 - Security issues in Condor < 8.8.8 https://bugzilla.redhat.com/show_bug.cgi?id=1822525 [ 2 ] Bug #1828437 - CVE-2019-18823 condor: htcondor: Incorrect access control in condor_startd [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1828437 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-ae934f6790' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packagesare signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Discover the essential updates in Condor 8.8.8 for Fedora 30, featuring job management improvements, user interface enhancements, and vital security fixes. Fedora 30, Condor 8.8.8, High Throughput Computing. . Severity: Critical. LinuxSecurity.com Team

May 16, 2020 •Critical Fedora