https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-0318.htmlhttps://patchthecve.com/cve/CVE-2004-0318.htmlTue, 16 Jun 2026 22:05:22 +0000HIGH 10.0: Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.https://patchthecve.com/cve/CVE-2004-0317.htmlhttps://patchthecve.com/cve/CVE-2004-0317.htmlTue, 16 Jun 2026 22:05:22 +0000HIGH 10.0: Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter.https://patchthecve.com/cve/CVE-2003-0337.htmlhttps://patchthecve.com/cve/CVE-2003-0337.htmlTue, 16 Jun 2026 22:02:01 +0000MEDIUM 4.6: The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes