Package: htcondor
Version: 8.6.8~dfsg.1-2
Severity: normal

8.6.8~dfsg.1-1 was uploaded over 3 years ago.  Since then multiple
upstream releases were made, possibly (didn't check) addressing CVE of 

Bugs with severity grave
   1) #963777  condor: CVE-2019-18823

and possibly

Bugs with severity serious
   2) #925657  condor: ftbfs with GCC-9
   3) #966726  condor: Unversioned Python removal in sid/bullseye

In our case we also encountered "buffer overflow detected" upon running
condor_q -json  and it is unlikely worth filing a new issue without checking
first  if a upstream work of the past 3 years has likely addressed it.

So it would be great to see a newer version of condor be shipped in
Debian.

Cheers,

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (900, 'testing'), (600, 'unstable'), (300, 'experimental'), (100, 
'unstable-debug'), (100, 'stable-updates'), (100, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.9.0-4-amd64 (SMP w/12 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages htcondor depends on:
ii  adduser                       3.118
ii  debconf [debconf-2.0]         1.5.74
ii  libc6                         2.31-5
pn  libcgroup1                    <none>
pn  libclassad8                   <none>
ii  libcom-err2                   1.45.6-1
ii  libcurl4                      7.72.0-1
ii  libdate-manip-perl            6.83-1
ii  libexpat1                     2.2.10-1
ii  libgcc-s1 [libgcc1]           10.2.1-1
pn  libglobus-callout0            <none>
pn  libglobus-common0             <none>
pn  libglobus-ftp-client2         <none>
pn  libglobus-gass-transfer2      <none>
pn  libglobus-gram-client3        <none>
pn  libglobus-gram-protocol3      <none>
pn  libglobus-gsi-callback0       <none>
pn  libglobus-gsi-cert-utils0     <none>
pn  libglobus-gsi-credential1     <none>
pn  libglobus-gsi-openssl-error0  <none>
pn  libglobus-gsi-proxy-core0     <none>
pn  libglobus-gsi-proxy-ssl1      <none>
pn  libglobus-gsi-sysconfig1      <none>
pn  libglobus-gss-assist3         <none>
pn  libglobus-gssapi-error2       <none>
pn  libglobus-gssapi-gsi4         <none>
pn  libglobus-io3                 <none>
pn  libglobus-openssl-module0     <none>
pn  libglobus-rsl2                <none>
pn  libglobus-xio0                <none>
ii  libgomp1                      10.2.1-1
ii  libgssapi-krb5-2              1.18.3-4
ii  libk5crypto3                  1.18.3-4
ii  libkrb5-3                     1.18.3-4
ii  libkrb5support0               1.18.3-4
ii  libldap-2.4-2                 2.4.56+dfsg-1
ii  libltdl7                      2.4.6-14
ii  libpcre3                      2:8.39-13
ii  libssl1.1                     1.1.1h-1
ii  libstdc++6                    10.2.1-1
ii  libuuid1                      2.36.1-2
ii  libvirt0                      6.9.0-1+b2
ii  libx11-6                      2:1.7.0-2
ii  libxext6                      2:1.3.3-1+b2
ii  libxss1                       1:1.2.3-1
ii  lsb-base                      11.1.0
ii  perl                          5.32.0-6
pn  python                        <none>
ii  zlib1g                        1:1.2.11.dfsg-2

Versions of packages htcondor recommends:
pn  dmtcp           <none>
pn  ecryptfs-utils  <none>

Versions of packages htcondor suggests:
pn  coop-computing-tools   <none>
ii  docker.io              20.10.0+dfsg2-1
ii  singularity-container  3.5.2+ds1-1
pn  slurm-client           <none>

Reply via email to