 |
 |
On Sat, 2006-10-21 at 14:40 +0200, Lorne Levinson wrote: > I saw that a new version of Torque 2, 2.1.4, was put last night on: > http://www.clusterresources.com/downloads/torque/ > The changelog reads: > > 2.1.4 > b - fix cput job status > b - Fix "Spool Job Race condition" > > Has anyone confirmed that this closes the reported security hole? > > The LCG/EGEE Torque version is 1.0.1. Is there a known reason why it > is not Torque 2? Is there a reason not to upgrade to Torque 2? Yes 2.1.4 fixes the hole, but you want 2.1.5 that fixes a regression and another hole that we found during the process. -- Ake Sandgren, HPC2N, Umea University, S-90187 Umea, Sweden Internet: [log in to unmask] Phone: +46 90 7866134 Fax: +46 90 7866126 Mobile: +46 70 7716134 WWW: http://www.hpc2n.umu.se