Oval Definition:oval:org.opensuse.security:def:91208
Revision Date:2020-01-16Version:1
Title:Security update for slurm (Important)
Description:

This update for slurm to version 18.08.9 fixes the following issues:

Security issues fixed:

- CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692). - CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue (bnc#1140709). - CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784). Bug fixes:

- Fix ownership of /var/spool/slurm on new installations and upgrade (bsc#1158696). - Fix %posttrans macro _res_update to cope with added newline (bsc#1153259). - Move srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095).
Family:unixClass:patch
Status:Reference(s):1140709
1153095
1153259
1155784
1158696
1159692
CVE-2019-12838
CVE-2019-19727
CVE-2019-19728
SUSE-SU-2020:0110-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for High Performance Computing 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed
  • AND Package Information
  • libpmi0-18.08.9-3.10.1 is installed
  • OR libslurm33-18.08.9-3.10.1 is installed
  • OR perl-slurm-18.08.9-3.10.1 is installed
  • OR slurm-18.08.9-3.10.1 is installed
  • OR slurm-auth-none-18.08.9-3.10.1 is installed
  • OR slurm-config-18.08.9-3.10.1 is installed
  • OR slurm-config-man-18.08.9-3.10.1 is installed
  • OR slurm-devel-18.08.9-3.10.1 is installed
  • OR slurm-doc-18.08.9-3.10.1 is installed
  • OR slurm-lua-18.08.9-3.10.1 is installed
  • OR slurm-munge-18.08.9-3.10.1 is installed
  • OR slurm-node-18.08.9-3.10.1 is installed
  • OR slurm-pam_slurm-18.08.9-3.10.1 is installed
  • OR slurm-plugins-18.08.9-3.10.1 is installed
  • OR slurm-slurmdbd-18.08.9-3.10.1 is installed
  • OR slurm-sql-18.08.9-3.10.1 is installed
  • OR slurm-sview-18.08.9-3.10.1 is installed
  • OR slurm-torque-18.08.9-3.10.1 is installed
  • BACK