Alerts This Week
Warning Icon 1 825
Alerts This Week
Warning Icon 1 825

Red Hat Enterprise MRG 5: RHSA-2012:0100-01 Moderate Update

red hat
Calendar Grey February 6, 2012
Dist Redhat Esm H88
The latest update for Red Hat's MRG Grid resolves several concerns and defects, while also delivering improvements for users of RHEL 5.
Updated Grid component packages that fix multiple security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise...

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259

Summary

Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers.
MRG Grid provides high-throughput computing and enables enterprises to achieve higher peak computing capacity as well as improved infrastructure utilization by leveraging their existing technology to build high performance grids. MRG Grid provides a job-queueing mechanism, scheduling policy, and a priority scheme, as well as resource monitoring and resource management. Users submit their jobs to MRG Grid, where they are placed into a queue. MRG Grid then chooses when and where to run the jobs based upon a policy, carefully monitors their progress, and ultimately informs the user upon completion.
Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user. (CVE-2011-4930)
These updated packages for Red Hat Enterprise Linux 5 provide enhancements and bug fixes for the Grid component of MRG. Some select enhancements and fixes include:
* Addition of -sort option to condor_status
* Customized output from condor_q -run for EC2 jobs
* Enhanced the summary line provided by condor_q
* Improved Collector performance around blocking network calls
* Fixed a memory leak associated with python-psycopg2 hit by cumin-data
Space precludes documenting all of these changes in this advisory. Refer to the Red Hat Enterprise MRG 2 Technical Notes document for information on these changes:
https://access.redhat.com/search/ Notes/index.html
All users of the Grid capabilities of Red Hat Enterprise MRG 2 are advised to upgrade to these updated packages, which resolve the issues and add the enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes.

References

https://access.redhat.com/security/cve/CVE-2011-4930 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/search/Notes/index.html

Package List

MRG Grid for RHEL 5 Server v.2:
Source:
i386: condor-7.6.5-0.12.el5.i386.rpm condor-aviary-7.6.5-0.12.el5.i386.rpm condor-classads-7.6.5-0.12.el5.i386.rpm condor-debuginfo-7.6.5-0.12.el5.i386.rpm condor-kbdd-7.6.5-0.12.el5.i386.rpm condor-qmf-7.6.5-0.12.el5.i386.rpm condor-vm-gahp-7.6.5-0.12.el5.i386.rpm
noarch: condor-ec2-enhanced-1.3.0-1.el5.noarch.rpm condor-ec2-enhanced-hooks-1.3.0-1.el5.noarch.rpm condor-wallaby-base-db-1.19-1.el5.noarch.rpm cumin-0.1.5192-1.el5.noarch.rpm python-condorec2e-1.3.0-1.el5.noarch.rpm python-wallaby-0.12.5-1.el5.noarch.rpm ruby-spqr-0.3.5-1.el5.noarch.rpm ruby-wallaby-0.12.5-1.el5.noarch.rpm spqr-gen-0.3.5-1.el5.noarch.rpm wallaby-0.12.5-1.el5.noarch.rpm wallaby-utils-0.12.5-1.el5.noarch.rpm
x86_64: condor-7.6.5-0.12.el5.x86_64.rpm condor-aviary-7.6.5-0.12.el5.x86_64.rpm condor-classads-7.6.5-0.12.el5.x86_64.rpm condor-debuginfo-7.6.5-0.12.el5.x86_64.rpm condor-kbdd-7.6.5-0.12.el5.x86_64.rpm condor-qmf-7.6.5-0.12.el5.x86_64.rpm condor-vm-gahp-7.6.5-0.12.el5.x86_64.rpm
MRG Grid Execute Node for RHEL 5 Server v.2:
Source:
i386: condor-7.6.5-0.12.el5.i386.rpm condor-classads-7.6.5-0.12.el5.i386.rpm condor-debuginfo-7.6.5-0.12.el5.i386.rpm condor-kbdd-7.6.5-0.12.el5.i386.rpm condor-qmf-7.6.5-0.12.el5.i386.rpm

Read the Full Advisory


Advisory ID: RHSA-2012:0100-01
Product: Red Hat Enterprise MRG for RHEL-5
Issue date: 2012-02-06
Keywords: MRG, Grid, Management, Enhancements, Security, Bug Fix, 2.1.1

Topic

Updated Grid component packages that fix multiple security issues, multiplebugs, and add various enhancements are now available for Red Hat EnterpriseMRG 2 for Red Hat Enterprise Linux 5.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available from the CVE link inthe References section.

Relevant Releases Architectures

MRG Grid Execute Node for RHEL 5 Server v.2 - i386, noarch, x86_64

MRG Grid for RHEL 5 Server v.2 - i386, noarch, x86_64

MRG Management for RHEL 5 Server v.2 - noarch

Red Hat MRG Messaging for RHEL 5 Server v.2 - i386, x86_64

Bugs Fixed

613931 - cannot delete user name from condor_userprio -all and wrong resource number

748735 - Cumin generates application error: TypeError: len() of unsized object from cumin/objectframe.py, line 298

750063 - condor_q -run w/ EC2 should display EC2RemoteVirtualMachine

751072 - Some condor_* commands with valid parameter '-help' return non zero exit code

751779 - Up-time display for Scheduler object is not dd:hh:mm

751834 - Hardcoded resource URL (ec2.amazonaws.com)

752322 - Suspended jobs should be displayed in condor_q summary line

753829 - Dag submissions have incorrect job totals from plugin publisher

754202 - History file and index management during condor_job_server runtime

756401 - SPQR defaults to PLAIN authentication if a username is specified

756402 - SPQR does not support every authentication mechanism available in qmfengine

759154 - Script sshd.sh print 0 as error code of some utilities instead of returned code

759200 - Memory leak in python-psycopg2

759433 - OpenMPI job fails when sshd.sh putting identity keys back.

759548 - CVE-2011-4930 Condor: Multiple format string flaws

761165 - EC2AvailabilityZone misspelled

761588 - condor_schedd.init script isn't removing pidfile

765713 - Memory usage graph - gray collor

765846 - Submit VM job - doesn't work

771642 - Cumin generates application error: AttributeError: 'int' object has no attribute 'name', wallabyoperations.py line 420

773680 - Released job doesn't start

Read the Full Advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here