Описание
Security update for slurm
This update for slurm to version 17.11.7 fixes the following issues:
This security issue was fixed:
- CVE-2018-10995: Ensure correct handling of user names and group ids (bsc#1095508).
These non-security issues were fixed:
- CRAY - Add slurmsmwd to the contribs/cray dir
- PMIX - Added the direct connect authentication.
- Prevent the backup slurmctld from losing the active/available node features list on takeover.
- Be able to force power_down of cloud node even if in power_save state.
- Allow cloud nodes to be recognized in Slurm when booted out of band.
- Notify srun and ctld when unkillable stepd exits.
- Fixes daemoniziation in newly introduced slurmsmwd daemon.
The following tracked packaging changes are included:
- avoid postun error in libpmi0 (bsc#1100850)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
libpmi0-17.11.7-lp150.5.7.1
libslurm32-17.11.7-lp150.5.7.1
perl-slurm-17.11.7-lp150.5.7.1
slurm-17.11.7-lp150.5.7.1
slurm-auth-none-17.11.7-lp150.5.7.1
slurm-config-17.11.7-lp150.5.7.1
slurm-devel-17.11.7-lp150.5.7.1
slurm-doc-17.11.7-lp150.5.7.1
slurm-lua-17.11.7-lp150.5.7.1
slurm-munge-17.11.7-lp150.5.7.1
slurm-node-17.11.7-lp150.5.7.1
slurm-openlava-17.11.7-lp150.5.7.1
slurm-pam_slurm-17.11.7-lp150.5.7.1
slurm-plugins-17.11.7-lp150.5.7.1
slurm-seff-17.11.7-lp150.5.7.1
slurm-sjstat-17.11.7-lp150.5.7.1
slurm-slurmdbd-17.11.7-lp150.5.7.1
slurm-sql-17.11.7-lp150.5.7.1
slurm-sview-17.11.7-lp150.5.7.1
slurm-torque-17.11.7-lp150.5.7.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1955-1
- SUSE Security Ratings
Описание
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
Затронутые продукты
openSUSE Leap 15.0:libpmi0-17.11.7-lp150.5.7.1
openSUSE Leap 15.0:libslurm32-17.11.7-lp150.5.7.1
openSUSE Leap 15.0:perl-slurm-17.11.7-lp150.5.7.1
openSUSE Leap 15.0:slurm-17.11.7-lp150.5.7.1
Ссылки
- CVE-2018-10995
- SUSE Bug 1095508