DSA-5144: -1 condor -- security update
Published May 22, 2022
·Updated
condor - security update
Other sources
Several flaws have been discovered in HTCondor, a distributed workload management system, which allow users with only READ access to any daemon to use a different authentication method than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user and submit or remove jobs.
Affected Software
2 affected components
debian/condor
debian/condor
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HTCondorto a version that resolves this vulnerability.Patch DSA-5144-1
Event History
May 22, 2022
Advisory Published
12:00 AM