-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2011-3535 2011-06-09 07:22:14 --------------------------------------------------------------------------------
Name : torque Product : Fedora EPEL 5 Version : 2.3.13 Release : 2.el5 URL : http://www.clusterresources.com/products/torque/ Summary : Tera-scale Open-source Resource and QUEue manager Description : TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many other leading edge HPC organizations.
This build was configured with: --with-default-server=localhost --with-tcl --with-tk --enable-gui --with-rcp=/usr/bin/scp This package holds just a few shared files and directories.
-------------------------------------------------------------------------------- Update Information:
This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek.
Advisories: * https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-1870 * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2193
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #711463 - CVE-2011-2193 Torque Server Buffer Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=711463 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update torque' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org