[SECURITY] Fedora EPEL 5 Update: torque-2.5.7-1.el5.1

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3933
2011-07-30 10:03:11
--------------------------------------------------------------------------------

Name        : torque
Product     : Fedora EPEL 5
Version     : 2.5.7
Release     : 1.el5.1
URL         : http://www.clusterresources.com/products/torque/
Summary     : Tera-scale Open-source Resource and QUEue manager
Description :
TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource
manager providing control over batch jobs and distributed compute nodes.
TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability,
fault tolerance, and feature extension patches provided by USC, NCSA, OSC,
the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many
other leading edge HPC organizations.

This build was configured with:
  --with-default-server=localhost
  --with-tcl --with-tk
  --enable-gui
  --with-rcp=/usr/bin/scp
This package holds just a few shared files and directories.

--------------------------------------------------------------------------------
Update Information:

**Warning: Significant change, munge enabled - action required:**

The updated EPEL5 build of torque-2.5.7-1 as compared to previous versions enables munge[1] as an inter node authentication method.

It is highly advisable that prior to upgrading to version 2.5.7-1 of this torque package that munge is installed and enabled. A munge package[2] is of course available within EPEL5.

 * [1] http://code.google.com/p/munge/
 * [2] https://admin.fedoraproject.org/community/?package=munge#package_maintenance

To enable munge on your torque cluster:

 * Install the munge package on your pbs_server and submission hosts in your cluster.
 * On one host generate a key with */usr/sbin/create-munge-key*
 * Copy the key, /etc/munge/munge.key to your pbs_server and submission hosts on your cluster.
 * Start the munge daemon on these nodes.. **service munge start && chkconfig munge on**

**Warning: New internal format for Job arrays:**

TORQUE 2.5 uses a new format for job arrays. It is not backwards
compatible with job arrays from version 2.3 or 2.4. Therefore, it is imperative that the system be drained of any job arrays BEFORE upgrading. Upgrading with job arrays queued or running may cause data loss, crashes, etc, and is not supported.

This update  from 2.3.10 includes numerous bugfixes and enhancements. Please read the torque ChangeLog.The significant changes that require action prior to upgrade are however detailed above.



--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #713090 - CVE-2011-2907 torque: Authorization Bypass Vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=713090
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update torque' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------