SUSE-SU-2023:4564-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20234564-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4564-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2023:4564-1
Related
Published
2023-11-24T16:13:26Z
Modified
2023-11-24T16:13:26Z
Summary
Security update for slurm_23_02
Details

This update for slurm2302 fixes the following issues:

  • CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).

Bug fixes:

  • Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).
References

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / slurm_23_02

Package

Name
slurm_23_02
Purl
pkg:rpm/suse/slurm_23_02&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.02.6-150100.3.14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libslurm39": "23.02.6-150100.3.14.1",
            "slurm_23_02-torque": "23.02.6-150100.3.14.1",
            "slurm_23_02-plugin-ext-sensors-rrd": "23.02.6-150100.3.14.1",
            "perl-slurm_23_02": "23.02.6-150100.3.14.1",
            "slurm_23_02-auth-none": "23.02.6-150100.3.14.1",
            "libnss_slurm2_23_02": "23.02.6-150100.3.14.1",
            "slurm_23_02-lua": "23.02.6-150100.3.14.1",
            "slurm_23_02": "23.02.6-150100.3.14.1",
            "slurm_23_02-munge": "23.02.6-150100.3.14.1",
            "slurm_23_02-rest": "23.02.6-150100.3.14.1",
            "slurm_23_02-pam_slurm": "23.02.6-150100.3.14.1",
            "slurm_23_02-slurmdbd": "23.02.6-150100.3.14.1",
            "slurm_23_02-cray": "23.02.6-150100.3.14.1",
            "slurm_23_02-devel": "23.02.6-150100.3.14.1",
            "slurm_23_02-sview": "23.02.6-150100.3.14.1",
            "slurm_23_02-plugins": "23.02.6-150100.3.14.1",
            "slurm_23_02-config": "23.02.6-150100.3.14.1",
            "slurm_23_02-webdoc": "23.02.6-150100.3.14.1",
            "slurm_23_02-config-man": "23.02.6-150100.3.14.1",
            "slurm_23_02-doc": "23.02.6-150100.3.14.1",
            "libpmi0_23_02": "23.02.6-150100.3.14.1",
            "slurm_23_02-sql": "23.02.6-150100.3.14.1",
            "slurm_23_02-node": "23.02.6-150100.3.14.1"
        }
    ]
}