[SECURITY] Fedora 14 Update: torque-2.4.11-2.fc14

updates at fedoraproject.org updates at fedoraproject.org
Tue Jun 21 17:18:20 UTC 2011


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8117
2011-06-10 12:45:07
--------------------------------------------------------------------------------

Name        : torque
Product     : Fedora 14
Version     : 2.4.11
Release     : 2.fc14
URL         : http://www.clusterresources.com/products/torque/
Summary     : Tera-scale Open-source Resource and QUEue manager
Description :
TORQUE (Tera-scale Open-source Resource and QUEue manager) is a resource
manager providing control over batch jobs and distributed compute nodes.
TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability,
fault tolerance, and feature extension patches provided by USC, NCSA, OSC,
the U.S. Dept of Energy, Sandia, PNNL, U of Buffalo, TeraGrid, and many
other leading edge HPC organizations.

This package holds just a few shared files and directories.

--------------------------------------------------------------------------------
Update Information:

This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek - CVE-2011-2193.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Nov 18 2010 Steve Traylen <steve.traylen at cern.ch> - 2.4.11-2
- Add torque-buffer-overrun.patch patch, rhbz#711463
* Thu Nov 18 2010 Steve Traylen <steve.traylen at cern.ch> - 2.4.11-1
- New upstream 2.4.11.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #711463 - CVE-2011-2193 Torque Server Buffer Overflow Vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=711463
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update torque' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list