SUSE-SU-2020:2601-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20202601-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2601-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:2601-1
- Upstream
CVE (2)
- Related
- Published
- 2020-09-10T13:30:33Z
- Modified
- 2026-02-04T02:56:39Z
- Summary
- Security update for slurm
- Details
-
This update for slurm fixes the following issues:
- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to launch a process as an arbitrary user. Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.
- References
Affected packages
SUSE:Linux Enterprise Module for HPC 12 / slurm
Package
- Name
- slurm
- Purl
- pkg:rpm/suse/slurm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed17.02.11-6.44.1
Ecosystem specific
{
"binaries": [
{
"libpmi0": "17.02.11-6.44.1",
"libslurm31": "17.02.11-6.44.1",
"perl-slurm": "17.02.11-6.44.1",
"slurm": "17.02.11-6.44.1",
"slurm-auth-none": "17.02.11-6.44.1",
"slurm-config": "17.02.11-6.44.1",
"slurm-devel": "17.02.11-6.44.1",
"slurm-doc": "17.02.11-6.44.1",
"slurm-lua": "17.02.11-6.44.1",
"slurm-munge": "17.02.11-6.44.1",
"slurm-pam_slurm": "17.02.11-6.44.1",
"slurm-plugins": "17.02.11-6.44.1",
"slurm-sched-wiki": "17.02.11-6.44.1",
"slurm-slurmdb-direct": "17.02.11-6.44.1",
"slurm-slurmdbd": "17.02.11-6.44.1",
"slurm-sql": "17.02.11-6.44.1",
"slurm-torque": "17.02.11-6.44.1"
}
]
}