Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2989-1

Опубликовано: 15 нояб. 2019
Источник: suse-cvrf

Описание

Security update for slurm

This update for slurm fixes the following issues:

Security issue fixed:

  • CVE-2019-12838: Fixed an SQL injection (bsc#1140709).

Non-security issue fixed:

  • Added X11-forwarding (bsc#1153245).
  • Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095).

Список пакетов

SUSE Linux Enterprise Module for HPC 15
libpmi0-17.11.13-6.18.1
libslurm32-17.11.13-6.18.1
perl-slurm-17.11.13-6.18.1
slurm-17.11.13-6.18.1
slurm-auth-none-17.11.13-6.18.1
slurm-config-17.11.13-6.18.1
slurm-devel-17.11.13-6.18.1
slurm-doc-17.11.13-6.18.1
slurm-lua-17.11.13-6.18.1
slurm-munge-17.11.13-6.18.1
slurm-node-17.11.13-6.18.1
slurm-pam_slurm-17.11.13-6.18.1
slurm-plugins-17.11.13-6.18.1
slurm-slurmdbd-17.11.13-6.18.1
slurm-sql-17.11.13-6.18.1
slurm-torque-17.11.13-6.18.1
SUSE Linux Enterprise Module for HPC 15 SP1
libslurm32-17.11.13-6.18.1

Описание

SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.


Затронутые продукты
SUSE Linux Enterprise Module for HPC 15 SP1:libslurm32-17.11.13-6.18.1
SUSE Linux Enterprise Module for HPC 15:libpmi0-17.11.13-6.18.1
SUSE Linux Enterprise Module for HPC 15:libslurm32-17.11.13-6.18.1
SUSE Linux Enterprise Module for HPC 15:perl-slurm-17.11.13-6.18.1

Ссылки