-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 May 2022 15:57:10 +0200 Source: condor Binary: htcondor htcondor-dbg htcondor-dev libclassad-dev libclassad8 Architecture: mipsel Version: 8.6.8~dfsg.1-2+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-manda-05) Changed-By: Markus Koschany Description: htcondor - distributed workload management system htcondor-dbg - distributed workload management system - debugging symbols htcondor-dev - distributed workload management system - development files libclassad-dev - HTCondor classads expression language - development library libclassad8 - HTCondor classads expression language - runtime library Changes: condor (8.6.8~dfsg.1-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload. * Fix CVE-2019-18823: HTCondor has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs) * Fix CVE-2022-26110: When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon. Checksums-Sha1: 2e21abbfe388c4a4b6571706c24a0eb44d44eb77 17769 condor_8.6.8~dfsg.1-2+deb10u1_mipsel-buildd.buildinfo 860ddf221e2214edd88e2b02e525d8fce6f63b02 48398480 htcondor-dbg_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 68fac3b13856558c0baa93bf3ca07cafd16866b7 360388 htcondor-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 7538bd2d11db4078dfd22e77b35cad37f46b3980 3523548 htcondor_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 7204d91a3a3a3d5f44dd6ab27a7cf0be91eb86f3 280216 libclassad-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb fc080db8e8bcc45a278609f35a74d6fb15403c38 179132 libclassad8_8.6.8~dfsg.1-2+deb10u1_mipsel.deb Checksums-Sha256: c642ca38fffa8d20c345c2f12f6991b7b747d2fd4e0125471d2ce34343386c15 17769 condor_8.6.8~dfsg.1-2+deb10u1_mipsel-buildd.buildinfo 9f297c219d02a50c6ed01cb7e5bc43a4a11eef1a14b9381fd6c3686ebf32005a 48398480 htcondor-dbg_8.6.8~dfsg.1-2+deb10u1_mipsel.deb b41fc9b7ad7481546030227925a5f236dfbb6afd04285d9c754adcd80b852af3 360388 htcondor-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 4b724e02b54c8373aa20ea07c569d91a69600fff6311d2385638f7390d88a5f2 3523548 htcondor_8.6.8~dfsg.1-2+deb10u1_mipsel.deb cc089aa466966dd8fed803239fe12c409175db8d11fdc95ae25b049319e62c44 280216 libclassad-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 0f085c6e2f4124bd04bad781ceb67eab920f5de054b1d6275760cc93a98b7e2a 179132 libclassad8_8.6.8~dfsg.1-2+deb10u1_mipsel.deb Files: 8a72fef7cec830120a16bebe4c4c6fed 17769 science extra condor_8.6.8~dfsg.1-2+deb10u1_mipsel-buildd.buildinfo fa0b6ad0e8c6930bea062d596eb88053 48398480 debug extra htcondor-dbg_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 81420effe391bcf3695c4d5cafd6e68b 360388 libdevel extra htcondor-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 1e24d4b2c403735b5d2ce6291e06ce88 3523548 science extra htcondor_8.6.8~dfsg.1-2+deb10u1_mipsel.deb c7d17ef1160065b0dc9f2f5f10d6b086 280216 libdevel extra libclassad-dev_8.6.8~dfsg.1-2+deb10u1_mipsel.deb 9cbbb693ad4a1630a47cc836d1313a8d 179132 libs extra libclassad8_8.6.8~dfsg.1-2+deb10u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQ5dTuB/7AkreZZfGPYe+ogkxLY8FAmKKdW8ACgkQPYe+ogkx LY8sOQ/7BcIOrL8orEFEyZntYqqNBsq56N39bMyWQXnXZQo+DC6cac95/K8Vh9wG W9wUD0GECuU8/2x2vxlEDUFUWSzUmKcwUHZGyu1VOfIocicgAoMLNsgGZ+IsMBIy GTVa2IVZRR27e6ShUNWCZf87Yd456HXZzsxg4TiwXffVi88ki2nRbsg6SiAez+sM OKMq+JdIMtZWqh0VBc+sPsHice7rtzum/P9aYLb2tcHaXFiaqemZEz7F5Kkurjvk 44m6Q0gOJCiWTJaayV2NVrXivF8U9ERDAAdCtKe4b7z9Z/3gfyOlARGhV30YE/1u oEJJHvE0Sd3p56+baoaQHL+WrxC/RqVN9+cpdJcu2BMOGn5o5bNYRyvneO6LvJio ot6qmkskQF2yJxf/wJtYE62MFssSKZA2cuRPbu4kn4vUBhJDNCBjglU/WBUo3qbC LAlXrFgN3JpvskRP2bbLGRTnYsPfM5TlVqJmMhERrHSMLRJiVMhwGVW0UCRLX8ie DsVj/+WiTKlsyHiPVqROfiiBK3P3s8BINjRjnxPcZVP+pYkDYhWVFCiFatvPzFXY 5BK1A+QPhesaY34+xCryY5Jj3qzcDkJkrY3oVrzXzRcDQwhKafTJm7cuMVCpeGw1 eEAU+beQ7na8zEP2vaJsDJZNTyWhymWMf2OIhwp5/b3/3a2Bzgs= =GZjH -----END PGP SIGNATURE-----