SUSE-SU-2020:0443-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20200443-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0443-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2020:0443-1
- Upstream
- Related
- Published
- 2020-02-24T17:18:17Z
- Modified
- 2025-05-08T17:13:26.426408Z
- Summary
- Security update for pdsh, slurm_18_08
- Details
-
This update for pdsh, slurm1808 fixes the following issues:
Slurm was included in the 18.08 release, as 'slurm1808' package. The version 18.08.9 contains all recent security fixes, including:
- CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692).
- CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784).
pdsh was updated to:
- Add support for an alternative SLURM version when building the slurm plugin.
- References
-
- https://www.suse.com/support/update/announcement/2020/suse-su-20200443-1/
- https://bugzilla.suse.com/1018371
- https://bugzilla.suse.com/1065697
- https://bugzilla.suse.com/1085240
- https://bugzilla.suse.com/1095508
- https://bugzilla.suse.com/1123304
- https://bugzilla.suse.com/1140709
- https://bugzilla.suse.com/1155784
- https://bugzilla.suse.com/1158709
- https://bugzilla.suse.com/1158798
- https://bugzilla.suse.com/1159692
- https://www.suse.com/security/cve/CVE-2016-10030
- https://www.suse.com/security/cve/CVE-2017-15566
- https://www.suse.com/security/cve/CVE-2018-10995
- https://www.suse.com/security/cve/CVE-2018-7033
- https://www.suse.com/security/cve/CVE-2019-12838
- https://www.suse.com/security/cve/CVE-2019-19727
- https://www.suse.com/security/cve/CVE-2019-19728
- https://www.suse.com/security/cve/CVE-2019-6438
Affected packages
SUSE:Linux Enterprise Module for HPC 15
pdsh
Package
- Name
- pdsh
- Purl
- pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.33-7.6.1
Ecosystem specific
{
"binaries": [
{
"slurm_18_08": "18.08.9-1.5.2",
"slurm_18_08-lua": "18.08.9-1.5.2",
"pdsh-slurm_18_08": "2.33-7.6.1",
"slurm_18_08-doc": "18.08.9-1.5.2",
"pdsh-genders": "2.33-7.6.1",
"slurm_18_08-plugins": "18.08.9-1.5.2",
"libpmi0_18_08": "18.08.9-1.5.2",
"pdsh-slurm": "2.33-7.6.1",
"libslurm33": "18.08.9-1.5.2",
"pdsh-netgroup": "2.33-7.6.1",
"slurm_18_08-config": "18.08.9-1.5.2",
"slurm_18_08-munge": "18.08.9-1.5.2",
"pdsh-dshgroup": "2.33-7.6.1",
"slurm_18_08-torque": "18.08.9-1.5.2",
"slurm_18_08-auth-none": "18.08.9-1.5.2",
"slurm_18_08-sql": "18.08.9-1.5.2",
"slurm_18_08-pam_slurm": "18.08.9-1.5.2",
"pdsh-machines": "2.33-7.6.1",
"slurm_18_08-node": "18.08.9-1.5.2",
"perl-slurm_18_08": "18.08.9-1.5.2",
"slurm_18_08-slurmdbd": "18.08.9-1.5.2",
"pdsh": "2.33-7.6.1",
"slurm_18_08-devel": "18.08.9-1.5.2"
}
]
}slurm_18_08
Package
- Name
- slurm_18_08
- Purl
- pkg:rpm/suse/slurm_18_08&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.08.9-1.5.2
Ecosystem specific
{
"binaries": [
{
"slurm_18_08": "18.08.9-1.5.2",
"slurm_18_08-lua": "18.08.9-1.5.2",
"pdsh-slurm_18_08": "2.33-7.6.1",
"slurm_18_08-doc": "18.08.9-1.5.2",
"pdsh-genders": "2.33-7.6.1",
"slurm_18_08-plugins": "18.08.9-1.5.2",
"libpmi0_18_08": "18.08.9-1.5.2",
"pdsh-slurm": "2.33-7.6.1",
"libslurm33": "18.08.9-1.5.2",
"pdsh-netgroup": "2.33-7.6.1",
"slurm_18_08-config": "18.08.9-1.5.2",
"slurm_18_08-munge": "18.08.9-1.5.2",
"pdsh-dshgroup": "2.33-7.6.1",
"slurm_18_08-torque": "18.08.9-1.5.2",
"slurm_18_08-auth-none": "18.08.9-1.5.2",
"slurm_18_08-sql": "18.08.9-1.5.2",
"slurm_18_08-pam_slurm": "18.08.9-1.5.2",
"pdsh-machines": "2.33-7.6.1",
"slurm_18_08-node": "18.08.9-1.5.2",
"perl-slurm_18_08": "18.08.9-1.5.2",
"slurm_18_08-slurmdbd": "18.08.9-1.5.2",
"pdsh": "2.33-7.6.1",
"slurm_18_08-devel": "18.08.9-1.5.2"
}
]
}