Debian DSA-5144-1 : condor - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5144 advisory. Several flaws have been discovered in HTCondor, a distributed workload management system, which allow users with only READ access to any daemon to use a different...

[SECURITY] [DSA 5144-1] condor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5144-1 [email protected] https://www.debian.org/security/ Markus Koschany May 22, 2022 https://www.debian.org/security/faq -...

CVE-2022-26110

HTCondor vulnerability CVE-2022-26110 affects HTCondor 8.8.x up to 8.8.15, 9.0.x up to 9.0.9, and 9.1.x up to 9.5.x. When a user authenticates to a HTCondor daemon via CLAIMTOBE, they can impersonate another entity when issuing subsequent commands to that daemon. Root cause: misuse of CLAIMTOBE a...

CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...