Описание
Security update for slurm
This update for slurm fixes the following issues:
- CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674).
- CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279).
Список пакетов
SUSE Linux Enterprise Module for HPC 12
libpmi0-17.02.11-6.53.1
libslurm31-17.02.11-6.53.1
perl-slurm-17.02.11-6.53.1
slurm-17.02.11-6.53.1
slurm-auth-none-17.02.11-6.53.1
slurm-config-17.02.11-6.53.1
slurm-devel-17.02.11-6.53.1
slurm-doc-17.02.11-6.53.1
slurm-lua-17.02.11-6.53.1
slurm-munge-17.02.11-6.53.1
slurm-pam_slurm-17.02.11-6.53.1
slurm-plugins-17.02.11-6.53.1
slurm-sched-wiki-17.02.11-6.53.1
slurm-slurmdb-direct-17.02.11-6.53.1
slurm-slurmdbd-17.02.11-6.53.1
slurm-sql-17.02.11-6.53.1
slurm-torque-17.02.11-6.53.1
Ссылки
- Link for SUSE-SU-2022:3497-1
- E-Mail link for SUSE-SU-2022:3497-1
- SUSE Security Ratings
- SUSE Bug 1199278
- SUSE Bug 1199279
- SUSE Bug 1201674
- SUSE CVE CVE-2022-29500 page
- SUSE CVE CVE-2022-29501 page
- SUSE CVE CVE-2022-31251 page
Описание
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
Затронутые продукты
SUSE Linux Enterprise Module for HPC 12:libpmi0-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:libslurm31-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:perl-slurm-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:slurm-17.02.11-6.53.1
Ссылки
- CVE-2022-29500
- SUSE Bug 1199278
Описание
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
Затронутые продукты
SUSE Linux Enterprise Module for HPC 12:libpmi0-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:libslurm31-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:perl-slurm-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:slurm-17.02.11-6.53.1
Ссылки
- CVE-2022-29501
- SUSE Bug 1199279
Описание
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
Затронутые продукты
SUSE Linux Enterprise Module for HPC 12:libpmi0-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:libslurm31-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:perl-slurm-17.02.11-6.53.1
SUSE Linux Enterprise Module for HPC 12:slurm-17.02.11-6.53.1
Ссылки
- CVE-2022-31251
- SUSE Bug 1201674