-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 May 2022 15:57:10 +0200 Source: condor Architecture: source Version: 8.6.8~dfsg.1-2+deb10u1 Distribution: buster-security Urgency: high Maintainer: HTCondor Developers <condor-debian@cs.wisc.edu> Changed-By: Markus Koschany <apo@debian.org> Changes: condor (8.6.8~dfsg.1-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload. * Fix CVE-2019-18823: HTCondor has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs) * Fix CVE-2022-26110: When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon. Checksums-Sha1: 91ca41adaa5e672ff353e3e637868bac7e5f4c89 3129 condor_8.6.8~dfsg.1-2+deb10u1.dsc 1860085fdcc03d25851bbaa32f9562cbb219606a 10532736 condor_8.6.8~dfsg.1.orig.tar.gz 2e3ee6d6e64cbcc074fedf5fc3f953a8b5479b12 82648 condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz edcd0afd9cdb8bd157bb9bfb6caec2b4ed00946b 17347 condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo Checksums-Sha256: e5b22a3c2473bc9a78bc8b1e3b92cf4b43fbc75b352ea0bcb97c9d731fb796bd 3129 condor_8.6.8~dfsg.1-2+deb10u1.dsc 6d696a09d94fb55765593aa08628bd1170cbb687775d00f12c309b6af83c7356 10532736 condor_8.6.8~dfsg.1.orig.tar.gz 2db4fe73415e5ad67b7251106c02cf6ba572baa39280152c518694c1cdd49409 82648 condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz c2411e14e1d0d595b6ea3adc8aacabc300e7392204a4e5cc12e53135a5c6d682 17347 condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo Files: a237d2042d166ea8771f11529a5e01dd 3129 science extra condor_8.6.8~dfsg.1-2+deb10u1.dsc 4ebe1e0f25048804cacb29232103dc0c 10532736 science extra condor_8.6.8~dfsg.1.orig.tar.gz b09f3e434bb70112f737dce7e6b1d397 82648 science extra condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz 764a6686460fcada28d9be23d237c905 17347 science extra condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmKKUzxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkZTMP/3gK6pnjrQ+a1bwiXl+3DK5sVy3PbM4cafpd jExgDSI0nZ3cFKF8vtGLS2uCn8eP6IdRCSE6qZAgpTTpn4luG6qHJDOM2ARF9h7r 0bhlt7oX0cToRX0XLwYLJQI5CWnbgeqGotg5zolQmFT9LTlwCnHok0wyulTts0LL qKUVoYwUWepmvEGpc19zCCKzh3LTQoKvJMNGqcd9g3+U0I8A21rzoAIXuSV3lEih 2Ak5yfs5VijZJpT6rWQ7aY5lD6zJqf1UeHB15G6HZhFtarEYkCD87euwORx0ipqu Srckk0GYo81YCFur6fSJnD3ZFa15I1TZObp5eQjcqaSbkxATEfzOR4r7P5LPNXeo pQTbkQwM01ab6hmQ1FrdvRdoOp3acqN1qO6Orxlm4HSMAh3RVzUzgNQ8GFZNMLnI ufePQYz0BBe4vNKwnhgQEXShzKQ2HfpFXsBALGPYE9PbYkOblsyxmhWKX5r1c3oB MbymFC2sl3BSfi7wBNC+FvJDx+LOR6/gXmBQQTdRxbckgf0vzTrc/Hg1EwKGN4MY x4KXQAWN14anCfw4wl1TWmkQXE2jWwnJJqeqLNnCtHLW0sE4+m9b/J8/abIaQMtX +b724himfmL8OnJaz0jBQ9zQSDeY6Q/jDE9T+eIqU33Oc2omHMk1XNZ5RGaslvTk OQtFxvDE =98Nd -----END PGP SIGNATURE-----
