Описание
Security update for slurm_20_11
This update for slurm_20_11 fixes the following issues:
- CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279).
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libnss_slurm2_20_11-20.11.9-150100.3.14.1
libpmi0_20_11-20.11.9-150100.3.14.1
libslurm36-20.11.9-150100.3.14.1
perl-slurm_20_11-20.11.9-150100.3.14.1
slurm_20_11-20.11.9-150100.3.14.1
slurm_20_11-auth-none-20.11.9-150100.3.14.1
slurm_20_11-config-20.11.9-150100.3.14.1
slurm_20_11-config-man-20.11.9-150100.3.14.1
slurm_20_11-devel-20.11.9-150100.3.14.1
slurm_20_11-doc-20.11.9-150100.3.14.1
slurm_20_11-lua-20.11.9-150100.3.14.1
slurm_20_11-munge-20.11.9-150100.3.14.1
slurm_20_11-node-20.11.9-150100.3.14.1
slurm_20_11-pam_slurm-20.11.9-150100.3.14.1
slurm_20_11-plugins-20.11.9-150100.3.14.1
slurm_20_11-slurmdbd-20.11.9-150100.3.14.1
slurm_20_11-sql-20.11.9-150100.3.14.1
slurm_20_11-sview-20.11.9-150100.3.14.1
slurm_20_11-torque-20.11.9-150100.3.14.1
slurm_20_11-webdoc-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libnss_slurm2_20_11-20.11.9-150100.3.14.1
libpmi0_20_11-20.11.9-150100.3.14.1
libslurm36-20.11.9-150100.3.14.1
perl-slurm_20_11-20.11.9-150100.3.14.1
slurm_20_11-20.11.9-150100.3.14.1
slurm_20_11-auth-none-20.11.9-150100.3.14.1
slurm_20_11-config-20.11.9-150100.3.14.1
slurm_20_11-config-man-20.11.9-150100.3.14.1
slurm_20_11-devel-20.11.9-150100.3.14.1
slurm_20_11-doc-20.11.9-150100.3.14.1
slurm_20_11-lua-20.11.9-150100.3.14.1
slurm_20_11-munge-20.11.9-150100.3.14.1
slurm_20_11-node-20.11.9-150100.3.14.1
slurm_20_11-pam_slurm-20.11.9-150100.3.14.1
slurm_20_11-plugins-20.11.9-150100.3.14.1
slurm_20_11-slurmdbd-20.11.9-150100.3.14.1
slurm_20_11-sql-20.11.9-150100.3.14.1
slurm_20_11-sview-20.11.9-150100.3.14.1
slurm_20_11-torque-20.11.9-150100.3.14.1
slurm_20_11-webdoc-20.11.9-150100.3.14.1
Ссылки
- Link for SUSE-SU-2022:1815-1
- E-Mail link for SUSE-SU-2022:1815-1
- SUSE Security Ratings
- SUSE Bug 1199278
- SUSE Bug 1199279
- SUSE CVE CVE-2022-29500 page
- SUSE CVE CVE-2022-29501 page
Описание
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libnss_slurm2_20_11-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpmi0_20_11-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libslurm36-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:perl-slurm_20_11-20.11.9-150100.3.14.1
Ссылки
- CVE-2022-29500
- SUSE Bug 1199278
Описание
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libnss_slurm2_20_11-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpmi0_20_11-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libslurm36-20.11.9-150100.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:perl-slurm_20_11-20.11.9-150100.3.14.1
Ссылки
- CVE-2022-29501
- SUSE Bug 1199279