- Qlustar General - Qlustar Mailing Lists

Security/Bug fix release 14.1.6
by no-reply-list＠qlustar.org 22 Jul '26

22 Jul '26

The Qlustar release 14.1.6 is ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0721261 https://qlustar.com/qsa/2026/0721262 Please note: Due to the increased threat level by the high frequency of discovered and exploitable security bugs, we are now shortening our usual security update release cycle and will couple it mostly to newly released kernel.org kernel versions. Since the kernel.org update frequency of the Qlustar 13 kernel 5.15.x is a lot less than that for the 6.12.x Qlustar 14 kernel, this means that we will also have security releases covering only Qlustar 14. This is an example. No non-security related updates/enhancements/bug fixes are included.

1 0

Stange Qluman quirks
by João Rodrigues 21 Jul '26

21 Jul '26

I recently upgraded our cluster from Qlustar 13 to 14. Since yesterday I noticed strange behaviors in Qluman GUI: 1. When using Hardware or GPU wizards, no nodes are shown in the "selected" list, even though I selected one in the "Enclosure view" window. 2. On the "Slurm Config" window, when creating a new "Gres group", I select a Type of GPU, but when pressing enter or tab, it is cleared. 3. Today, the "Enclosure view" is completely blank. Since I noticed these problems yesterday, I have avoided writing changes to files. What could be causing this? João Rodrigues

2 2

Security/Bug fix release 14.1.5.1
by no-reply-list＠qlustar.org 14 Jul '26

14 Jul '26

The Qlustar release 14.1.5.1 is ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0714261 This update includes several security related package updates from AlmaLinux only. In particular it includes fixes for the two critical kernel bugs GhostLock CVE-2026-43499) and Januscape (CVE-2026-53359). Note that Qlustar 14/Ubuntu already received fixes for both of these with the release 14.1.5 from July 4th. Important: The Qlustar 13 kernel 5.15.x is still vulnerable to both GhostLock and Januscape. It seems kernel developers are heavily overloaded and have decided to focus on the most recent LTS kernels for security fixes. In the light of this, we highly recommend to update Qlustar 13 systems to Qlustar 14 as soon as possible. Nevertheless, we will provide patched Qlustar 13 kernels as soon as they are available from upstream.

1 0

Addendum for Security/Bug fix releases 14.1.5, 13.4.5
by no-reply-list＠qlustar.org 09 Jul '26

09 Jul '26

This is an addendum to our release notes for Qlustar releases 14.1.5 and 13.4.5 which were published on Saturday. Since then a few local root exploits and other critical bugs have been published, in particular - GhostLock (CVE-2026-43499) - Bad Epoll (CVE-2026-46242) - Januscape (CVE-2026-53359) Qlustar 14.1.5/Ubuntu has fixed all of these bugs and you are urged to update your systems if you haven't done so. Qlustar 14.1.5/Alma and Qlustar 13.4.5 are not vulnerable to Bad Epoll, but are still vulnerable to Januscape and GhostLock. In general we highly recommend to update to Qlustar 14 if you haven't done so yet, as the Qlustar 13 kernel 5.15.x receives fixes by upstream with a much larger delay as compared to the Qlustar 14 kernel 6.12.x.

1 0

Security/Bug fix releases 14.1.5, 13.4.5
by no-reply-list＠qlustar.org 06 Jul '26

06 Jul '26

The Qlustar releases 14.1.5 and 13.4.5 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0704261 https://qlustar.com/qsa/2026/0704262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - QluMan 14.1.5.1 * QluMan GUI: Properly use XDG_RUNTIME_DIR inside of the singularity container to make qluman-qt work flawlessly under Wayland. This requires adding the singularity/apptainer "bind path" /run/user as explained in the updated docs. * Alerts - Fixes/Improvements of the expression editor + Add a new warning/critical severity alert type that covers alerts where the same expression can be used with different severity levels depending on the value of the expression. Example: CPU temperature with warning and critical values. + Filter out linebreaks and repeated spaces in expressions. + Don't expand metrics tree per default. - Misc + Sort node roles so the monitoring.conf doesn't randomly change * Slurm - Fix issues in the reservation dialog that prevented the creation of reservations. - Fix issues in the job management dialog that appeared after update to slurm 25.05 * Refactoring of config file generator (Write Files). Drop obsolete NIS and collectl config properties. * Misc fixes for Redfish/BIOS management to reliably allows checking and auto-correction of BIOS settings. * Add new node types 'OTHER' (for non-Qlustar machines) and 'VIRTUAL' (for HA virtual IPs) to provide special integration functionality e.g. for monitoring external nodes via prometheus. - Revamped Qlustar Grafana Home and Slurm dashboards - Improved qlustar prometheus IPMI metrics

1 0

Issue creating a noble image in qlustar 13
by João Rodrigues 02 Jul '26

02 Jul '26

On a Qlustar 13 cluster I created a new boot image with flavour: noble, version: 14 UnionFS Chroot: noble Upon writing changes, QlustarImageConfig reports: Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: qlustar-module-core-noble-amd64-14.1 : Depends: qlustar-image-abi-7.0 but it is not installable qlustar-module-initramfs-noble-amd64-14.1 : Depends: qlustar-image-abi-7.0 but it is not installable E: Unable to correct problems, you have held broken packages. How can I fix this?

2 1

Security/Bug fix releases 14.1.4, 13.4.4
by no-reply-list＠qlustar.org 08 Jun '26

08 Jun '26

The Qlustar releases 14.1.4 and 13.4.4 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0608261 https://qlustar.com/qsa/2026/0608262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - Improved qlustar prometheus IPMI metrics - Fix occasional display corruption when using vim

1 0

Security/Bug fix releases 14.1.3, 13.4.3
by no-reply-list＠qlustar.org 16 May '26

16 May '26

The Qlustar releases 14.1.3 and 13.4.3 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0515261 https://qlustar.com/qsa/2026/0515262

3 2

Mitigation for the Dirty Frag vulnerability
by no-reply-list＠qlustar.org 09 May '26

09 May '26

It was discovered [1] that the Linux kernel modules esp4, esp6 and rxrpc contain a logic flaw allowing a local attacker to escalate privileges to root. All Qlustar 13 and 14 Ubuntu releases are vulnerable to this bug. On Qlustar 13 Ubuntu releases the public exploit does not work though. To mitigate the issue until kernel updates are made available please proceed as follows: On the head-node execute: $ cat > /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules << EOF #!/bin/bash modules_to_be_removed="esp4 esp6 rxrpc" for mod in \$modules_to_be_removed; do mod_paths=\$(find /usr/lib/modules/\$(uname -r) -name "\$mod.*") if [ -n "\$mod_paths" ]; then echo "Found vulnerable kernel module \$mod ==> Removing it" echo \$mod_paths | xargs rm -f fi rmmod \$mod > /dev/null 2>&1 done EOF $ chmod 755 /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules Then on all running cluster nodes including the head-node execute: $ /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules These changes will prevent loading the faulty kernel modules, which are not needed on any standard Qlustar HPC/AI/Storage cluster setup. [1] https://dirtyfrag.io

1 0

Security/Bug fix releases 14.1.2, 13.4.2
by no-reply-list＠qlustar.org 02 May '26

02 May '26

The Qlustar releases 14.1.2 and 13.4.2 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0502261 https://qlustar.com/qsa/2026/0502262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - QluMan 14.1.4 * Alerts - Fixes/Improvements of the expression editor + Parse metric values as float and use QDoubleSpinBox for larger range of values. + Convert value to int when it's a whole number (e.g. use 16 instead of 16.0 in the expression). + Catch and show exception when opening expression editor. - Fixes/Improvements of the alert silencing dialog + Add ErrorDialog when fetching silences fails. + Reset input mask on save. + Reset color for Starts label when selection changes. + Fix exception about c++ object deleted on update. * Slurm ManageAssociations - Convert value to str before setting text in QOSLineEdit.undo(). * Command editor - Remove duplicate save of command when the name is changed. - Don't trigger a save when setting the argument filters while selecting a command. * Switch support - Remove host_id from SwitchData entries when deleting hosts. - Add the rights for SwitchData and query_switch to the 'Can configure hosts.' right. - Delete switch data if a switch is being deleted. * Misc - Fix local variable collision preventing qlustar module files getting copied to netboot nodes for lustre nodes. - nvidia-570 module * nvidia-persistenced: Enforce persistence-mode at startup. - lustre-2.17 + lustre-client module * Make ko2iblnd work with mlnx-ofed (doca).

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

Qlustar General