SUSE-SU-2020:2598-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20202598-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2598-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:2598-1
- Upstream
- Related
- Published
- 2020-09-10T13:29:28Z
- Modified
- 2026-02-04T02:36:30Z
- Summary
- Security update for slurm
- Details
-
This update for slurm fixes the following issues:
- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to launch a process as an arbitrary user. Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.
- References
Affected packages
SUSE:Linux Enterprise Module for HPC 15 SP1 / slurm
Package
- Name
- slurm
- Purl
- pkg:rpm/suse/slurm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed18.08.9-3.13.2
Ecosystem specific
{
"binaries": [
{
"libpmi0": "18.08.9-3.13.2",
"libslurm33": "18.08.9-3.13.2",
"perl-slurm": "18.08.9-3.13.2",
"slurm": "18.08.9-3.13.2",
"slurm-auth-none": "18.08.9-3.13.2",
"slurm-config": "18.08.9-3.13.2",
"slurm-config-man": "18.08.9-3.13.2",
"slurm-devel": "18.08.9-3.13.2",
"slurm-doc": "18.08.9-3.13.2",
"slurm-lua": "18.08.9-3.13.2",
"slurm-munge": "18.08.9-3.13.2",
"slurm-node": "18.08.9-3.13.2",
"slurm-pam_slurm": "18.08.9-3.13.2",
"slurm-plugins": "18.08.9-3.13.2",
"slurm-slurmdbd": "18.08.9-3.13.2",
"slurm-sql": "18.08.9-3.13.2",
"slurm-sview": "18.08.9-3.13.2",
"slurm-torque": "18.08.9-3.13.2"
}
]
}