-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 22 May 2022 15:57:10 +0200
Source: condor
Architecture: source
Version: 8.6.8~dfsg.1-2+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: HTCondor Developers <condor-debian@cs.wisc.edu>
Changed-By: Markus Koschany <apo@debian.org>
Changes:
condor (8.6.8~dfsg.1-2+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload.
* Fix CVE-2019-18823:
HTCondor has Incorrect Access Control. It is possible to use a different
authentication method to submit a job than the administrator has specified.
If the administrator has configured the READ or WRITE methods to include
CLAIMTOBE, then it is possible to impersonate another user to the
condor_schedd. (For example to submit or remove jobs)
* Fix CVE-2022-26110:
When a user authenticates to an HTCondor daemon via the CLAIMTOBE method,
the user can then impersonate any entity when issuing additional commands
to that daemon.
Checksums-Sha1:
91ca41adaa5e672ff353e3e637868bac7e5f4c89 3129 condor_8.6.8~dfsg.1-2+deb10u1.dsc
1860085fdcc03d25851bbaa32f9562cbb219606a 10532736 condor_8.6.8~dfsg.1.orig.tar.gz
2e3ee6d6e64cbcc074fedf5fc3f953a8b5479b12 82648 condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz
edcd0afd9cdb8bd157bb9bfb6caec2b4ed00946b 17347 condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo
Checksums-Sha256:
e5b22a3c2473bc9a78bc8b1e3b92cf4b43fbc75b352ea0bcb97c9d731fb796bd 3129 condor_8.6.8~dfsg.1-2+deb10u1.dsc
6d696a09d94fb55765593aa08628bd1170cbb687775d00f12c309b6af83c7356 10532736 condor_8.6.8~dfsg.1.orig.tar.gz
2db4fe73415e5ad67b7251106c02cf6ba572baa39280152c518694c1cdd49409 82648 condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz
c2411e14e1d0d595b6ea3adc8aacabc300e7392204a4e5cc12e53135a5c6d682 17347 condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo
Files:
a237d2042d166ea8771f11529a5e01dd 3129 science extra condor_8.6.8~dfsg.1-2+deb10u1.dsc
4ebe1e0f25048804cacb29232103dc0c 10532736 science extra condor_8.6.8~dfsg.1.orig.tar.gz
b09f3e434bb70112f737dce7e6b1d397 82648 science extra condor_8.6.8~dfsg.1-2+deb10u1.debian.tar.xz
764a6686460fcada28d9be23d237c905 17347 science extra condor_8.6.8~dfsg.1-2+deb10u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmKKUzxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkZTMP/3gK6pnjrQ+a1bwiXl+3DK5sVy3PbM4cafpd jExgDSI0nZ3cFKF8vtGLS2uCn8eP6IdRCSE6qZAgpTTpn4luG6qHJDOM2ARF9h7r 0bhlt7oX0cToRX0XLwYLJQI5CWnbgeqGotg5zolQmFT9LTlwCnHok0wyulTts0LL qKUVoYwUWepmvEGpc19zCCKzh3LTQoKvJMNGqcd9g3+U0I8A21rzoAIXuSV3lEih 2Ak5yfs5VijZJpT6rWQ7aY5lD6zJqf1UeHB15G6HZhFtarEYkCD87euwORx0ipqu Srckk0GYo81YCFur6fSJnD3ZFa15I1TZObp5eQjcqaSbkxATEfzOR4r7P5LPNXeo pQTbkQwM01ab6hmQ1FrdvRdoOp3acqN1qO6Orxlm4HSMAh3RVzUzgNQ8GFZNMLnI ufePQYz0BBe4vNKwnhgQEXShzKQ2HfpFXsBALGPYE9PbYkOblsyxmhWKX5r1c3oB MbymFC2sl3BSfi7wBNC+FvJDx+LOR6/gXmBQQTdRxbckgf0vzTrc/Hg1EwKGN4MY x4KXQAWN14anCfw4wl1TWmkQXE2jWwnJJqeqLNnCtHLW0sE4+m9b/J8/abIaQMtX +b724himfmL8OnJaz0jBQ9zQSDeY6Q/jDE9T+eIqU33Oc2omHMk1XNZ5RGaslvTk
OQtFxvDE
=98Nd
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)