Описание
Security update for slurm
This update for slurm to version 17.11.7 fixes the following issues:
This security issue was fixed:
- CVE-2018-10995: Ensure correct handling of user names and group ids (bsc#1095508).
These non-security issues were fixed:
- CRAY - Add slurmsmwd to the contribs/cray dir
- PMIX - Added the direct connect authentication.
- Prevent the backup slurmctld from losing the active/available node features list on takeover.
- Be able to force power_down of cloud node even if in power_save state.
- Allow cloud nodes to be recognized in Slurm when booted out of band.
- Notify srun and ctld when unkillable stepd exits.
- Fixes daemoniziation in newly introduced slurmsmwd daemon.
Список пакетов
SUSE Linux Enterprise Module for HPC 15
libpmi0-17.11.7-6.3.1
libslurm32-17.11.7-6.3.1
perl-slurm-17.11.7-6.3.1
slurm-17.11.7-6.3.1
slurm-auth-none-17.11.7-6.3.1
slurm-config-17.11.7-6.3.1
slurm-devel-17.11.7-6.3.1
slurm-doc-17.11.7-6.3.1
slurm-lua-17.11.7-6.3.1
slurm-munge-17.11.7-6.3.1
slurm-node-17.11.7-6.3.1
slurm-pam_slurm-17.11.7-6.3.1
slurm-plugins-17.11.7-6.3.1
slurm-slurmdbd-17.11.7-6.3.1
slurm-sql-17.11.7-6.3.1
slurm-torque-17.11.7-6.3.1
Ссылки
- Link for SUSE-SU-2018:1925-1
- E-Mail link for SUSE-SU-2018:1925-1
- SUSE Security Ratings
- SUSE Bug 1095508
- SUSE CVE CVE-2018-10995 page
Описание
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
Затронутые продукты
SUSE Linux Enterprise Module for HPC 15:libpmi0-17.11.7-6.3.1
SUSE Linux Enterprise Module for HPC 15:libslurm32-17.11.7-6.3.1
SUSE Linux Enterprise Module for HPC 15:perl-slurm-17.11.7-6.3.1
SUSE Linux Enterprise Module for HPC 15:slurm-17.11.7-6.3.1
Ссылки
- CVE-2018-10995
- SUSE Bug 1095508