- Qlustar General - Qlustar Mailing Lists

Addendum for Security/Bug fix releases 14.1.5, 13.4.5
by no-reply-list＠qlustar.org 09 Jul '26

09 Jul '26

This is an addendum to our release notes for Qlustar releases 14.1.5 and 13.4.5 which were published on Saturday. Since then a few local root exploits and other critical bugs have been published, in particular - GhostLock (CVE-2026-43499) - Bad Epoll (CVE-2026-46242) - Januscape (CVE-2026-53359) Qlustar 14.1.5/Ubuntu has fixed all of these bugs and you are urged to update your systems if you haven't done so. Qlustar 14.1.5/Alma and Qlustar 13.4.5 are not vulnerable to Bad Epoll, but are still vulnerable to Januscape and GhostLock. In general we highly recommend to update to Qlustar 14 if you haven't done so yet, as the Qlustar 13 kernel 5.15.x receives fixes by upstream with a much larger delay as compared to the Qlustar 14 kernel 6.12.x.

1 0

Security/Bug fix releases 14.1.5, 13.4.5
by no-reply-list＠qlustar.org 06 Jul '26

06 Jul '26

The Qlustar releases 14.1.5 and 13.4.5 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0704261 https://qlustar.com/qsa/2026/0704262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - QluMan 14.1.5.1 * QluMan GUI: Properly use XDG_RUNTIME_DIR inside of the singularity container to make qluman-qt work flawlessly under Wayland. This requires adding the singularity/apptainer "bind path" /run/user as explained in the updated docs. * Alerts - Fixes/Improvements of the expression editor + Add a new warning/critical severity alert type that covers alerts where the same expression can be used with different severity levels depending on the value of the expression. Example: CPU temperature with warning and critical values. + Filter out linebreaks and repeated spaces in expressions. + Don't expand metrics tree per default. - Misc + Sort node roles so the monitoring.conf doesn't randomly change * Slurm - Fix issues in the reservation dialog that prevented the creation of reservations. - Fix issues in the job management dialog that appeared after update to slurm 25.05 * Refactoring of config file generator (Write Files). Drop obsolete NIS and collectl config properties. * Misc fixes for Redfish/BIOS management to reliably allows checking and auto-correction of BIOS settings. * Add new node types 'OTHER' (for non-Qlustar machines) and 'VIRTUAL' (for HA virtual IPs) to provide special integration functionality e.g. for monitoring external nodes via prometheus. - Revamped Qlustar Grafana Home and Slurm dashboards - Improved qlustar prometheus IPMI metrics

1 0

Issue creating a noble image in qlustar 13
by João Rodrigues 02 Jul '26

02 Jul '26

On a Qlustar 13 cluster I created a new boot image with flavour: noble, version: 14 UnionFS Chroot: noble Upon writing changes, QlustarImageConfig reports: Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: qlustar-module-core-noble-amd64-14.1 : Depends: qlustar-image-abi-7.0 but it is not installable qlustar-module-initramfs-noble-amd64-14.1 : Depends: qlustar-image-abi-7.0 but it is not installable E: Unable to correct problems, you have held broken packages. How can I fix this?

2 1

Security/Bug fix releases 14.1.4, 13.4.4
by no-reply-list＠qlustar.org 08 Jun '26

08 Jun '26

The Qlustar releases 14.1.4 and 13.4.4 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0608261 https://qlustar.com/qsa/2026/0608262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - Improved qlustar prometheus IPMI metrics - Fix occasional display corruption when using vim

1 0

Security/Bug fix releases 14.1.3, 13.4.3
by no-reply-list＠qlustar.org 16 May '26

16 May '26

The Qlustar releases 14.1.3 and 13.4.3 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0515261 https://qlustar.com/qsa/2026/0515262

3 2

Mitigation for the Dirty Frag vulnerability
by no-reply-list＠qlustar.org 09 May '26

09 May '26

It was discovered [1] that the Linux kernel modules esp4, esp6 and rxrpc contain a logic flaw allowing a local attacker to escalate privileges to root. All Qlustar 13 and 14 Ubuntu releases are vulnerable to this bug. On Qlustar 13 Ubuntu releases the public exploit does not work though. To mitigate the issue until kernel updates are made available please proceed as follows: On the head-node execute: $ cat > /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules << EOF #!/bin/bash modules_to_be_removed="esp4 esp6 rxrpc" for mod in \$modules_to_be_removed; do mod_paths=\$(find /usr/lib/modules/\$(uname -r) -name "\$mod.*") if [ -n "\$mod_paths" ]; then echo "Found vulnerable kernel module \$mod ==> Removing it" echo \$mod_paths | xargs rm -f fi rmmod \$mod > /dev/null 2>&1 done EOF $ chmod 755 /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules Then on all running cluster nodes including the head-node execute: $ /etc/qlustar/common/rc.boot/01-remove-vulnerable-kernel-modules These changes will prevent loading the faulty kernel modules, which are not needed on any standard Qlustar HPC/AI/Storage cluster setup. [1] https://dirtyfrag.io

1 0

Security/Bug fix releases 14.1.2, 13.4.2
by no-reply-list＠qlustar.org 02 May '26

02 May '26

The Qlustar releases 14.1.2 and 13.4.2 are ready including a number of security/bug fixes. Please check the following web pages for details about security fixes and special update instructions: https://qlustar.com/qsa/2026/0502261 https://qlustar.com/qsa/2026/0502262 The following non-security related updates/enhancements/bug fixes are included: For Qlustar 14 only: - QluMan 14.1.4 * Alerts - Fixes/Improvements of the expression editor + Parse metric values as float and use QDoubleSpinBox for larger range of values. + Convert value to int when it's a whole number (e.g. use 16 instead of 16.0 in the expression). + Catch and show exception when opening expression editor. - Fixes/Improvements of the alert silencing dialog + Add ErrorDialog when fetching silences fails. + Reset input mask on save. + Reset color for Starts label when selection changes. + Fix exception about c++ object deleted on update. * Slurm ManageAssociations - Convert value to str before setting text in QOSLineEdit.undo(). * Command editor - Remove duplicate save of command when the name is changed. - Don't trigger a save when setting the argument filters while selecting a command. * Switch support - Remove host_id from SwitchData entries when deleting hosts. - Add the rights for SwitchData and query_switch to the 'Can configure hosts.' right. - Delete switch data if a switch is being deleted. * Misc - Fix local variable collision preventing qlustar module files getting copied to netboot nodes for lustre nodes. - nvidia-570 module * nvidia-persistenced: Enforce persistence-mode at startup. - lustre-2.17 + lustre-client module * Make ko2iblnd work with mlnx-ofed (doca).

1 0

Mitigation for the Copy Fail vulnerability - actions refined
by no-reply-list＠qlustar.org 01 May '26

01 May '26

It was discovered that the Linux kernel algif_aead module contained a logic flaw allowing a local attacker to escalate privileges to root. All Qlustar 14 Ubuntu releases are vulnerable to this bug. Qlustar 13 Ubuntu releases are not vulnerable and Qlustar 13/14 AlmaLinux releases are vulnerable but the public exploit does not work there. To mitigate the issue until kernel updates are made available please proceed as follows: On all running Qlustar 14 Ubuntu nodes including the head-node execute $ rmmod algif_aead $ rm -f /usr/lib/modules/*/kernel/crypto/algif_aead.ko Then for each Qlustar 14 image do $ qlustar-image-edit -s <img-name> $ rm -f usr/lib/modules/*/kernel/crypto/algif_aead.ko $ exit Please note the missing / at the beginning of the path here. These changes will prevent loading the faulty algif_aead kernel module, which is not needed on any standard Qlustar HPC/AI cluster setup. To check whether a node was already exploited execute $ diff /union/image/usr/bin/su /usr/bin/su If they differ, someone definitely has exploited the bug and became root. In that case reboot the node immediately after you have changed the image like explained above.

1 0

Mitigation for the Copy Fail vulnerability
by no-reply-list＠qlustar.org 30 Apr '26

30 Apr '26

It was discovered that the Linux kernel algif_aead module contained a logic flaw allowing a local attacker to escalate privileges to root. All Qlustar 14 Ubuntu releases are vulnerable to this bug. Qlustar 13 Ubuntu releases are not vulnerable and Qlustar 13/14 AlmaLinux releases are vulnerable but the public exploit does not work there. To mitigate the issue until kernel updates are made available please proceed as follows: On all running Qlustar 14 Ubuntu nodes including the head-node execute $ rmmod algif_aead $ rm -f /usr/lib/modules/*/kernel/crypto/algif_aead.ko Then for each Qlustar 14 image do $ qlustar-image-edit -s <img-name> $ rm -f usr/lib/modules/*/kernel/crypto/algif_aead.ko $ exit 0 These changes will prevent loading the faulty algif_aead kernel module, which is not needed on any standard Qlustar HPC/AI cluster setup.

1 0

Qlustar at the HPC-AI Swiss Conference
by no-reply-list＠qlustar.org 18 Apr '26

18 Apr '26

Q-Leap Networks is sponsoring the HPC-AI Swiss Conference. The Qlustar team will be present there with a booth to showcase the current state of Qlustar and present the solutions built around it. If you are taking part in the conference, please step by to have a chat and ask us for a Qlustar overview or enjoy a live demo of the latest features. Looking forward to see you there. [1] https://www.hpcadvisorycouncil.ch/

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

Qlustar General