Uočen je i ispravljen nedostatak programskog paketa torque (Tera-scale Open-source Resource and QUEue manager). Zlonamjeran korisnik može iskoristiti nedostatak i prikazati se kao drugi korisnik.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0372
2012-01-11 20:23:50
--------------------------------------------------------------------------------

Name        : torque
Product     : Fedora 15
Version     : 3.0.3
Release     : 1.fc15
URL         : http://www.clusterresources.com/products/torque/
Summary     : Tera-scale Open-source Resource and QUEue manager
Description :
TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource
manager providing control over batch jobs and distributed compute nodes.
TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability,
fault tolerance, and feature extension patches provided by USC, NCSA, OSC,
the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many
other leading edge HPC organizations.

This package holds just a few shared files and directories.

--------------------------------------------------------------------------------
Update Information:

Fixes the ability for one user to impersonate another within a batch system.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 11 2012 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.3-1
- New upstream.
* Sun Oct  9 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-4
- Add patch torque-initd-hangs-rhbz-744138.patch
* Mon Sep 19 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-3
- Add --with-tcp-retry-limit=2 to build, rhbz#738576.
* Tue Aug 30 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-2
- Move checkpoint directory from torque-mom to torque package.
  rhbz#734878.
* Mon Jun 27 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-1
- Update to 3.0.2.
- Remove torque-buffer-overrun since upstream now.

>>>>>>> master
* Sun Jun 26 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.1-4
- Removes nodes database file from package rhbz#716659
* Fri Jun 17 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.1-3
- Add torque-munge-size.patch, rhbz#713996, Alex Chernyakhovsky
* Wed Jun  8 2011 Steve Traylen <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.1-2
- Add torque-buffer-overrun.patch patch, rhbz#711463
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #752079 - Torque and Munge impersonation vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=752079
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update torque' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce