Security update for pdsh, slurm_20_02 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2607-1 Final 1 1 2020-09-11T07:01:32Z current 2020-09-11T07:01:32Z 2020-09-11T07:01:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for pdsh, slurm_20_02 This update for pdsh, slurm_20_02 fixes the following issues: Changes in slurm_20_02: - Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805). - Do not run %check on SLE-12-SP2: Some incompatibility in tcl makes this fail. - Remove unneeded build dependency to postgresql-devel. - Disable build on s390 (requires 64bit). - Bring QA to the package build: add %%check stage. - Remove cruft that isn't needed any longer. - Add 'ghosted' run-file. - Add rpmlint filter to handle issues with library packages for Leap and enterprise upgrade versions. - Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004). - Other changes are: * Factor in ntasks-per-core=1 with cons_tres. * Fix formatting in error message in cons_tres. * Fix calling stat on a NULL variable. * Fix minor memory leak when using reservations with flags=first_cores. * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore > 1 on a node. * Fix --mem-per-gpu for heterogenous --gres requests. * Fix slurmctld load order in load_all_part_state(). * Fix race condition not finding jobacct gather task cgroup entry. * Suppress error message when selecting nodes on disjoint topologies. * Improve performance of _pack_default_job_details() with large number of job * arguments. * Fix archive loading previous to 17.11 jobs per-node req_mem. * Fix regresion validating that --gpus-per-socket requires --sockets-per-node * for steps. Should only validate allocation requests. * error() instead of fatal() when parsing an invalid hostlist. * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems. * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres. * cons_tres - Allocate lowest numbered cores when filtering cores with gres. * Fix getting system counts for named GRES/TRES. * MySQL - Fix for handing typed GRES for association rollups. * Fix step allocations when tasks_per_core > 1. * Fix allocating more GRES than requested when asking for multiple GRES types. - Treat libnss_slurm like any other package: add version string to upgrade package. - Updated to 20.02.1 with following changes' * Improve job state reason for jobs hitting partition_job_depth. * Speed up testing of singleton dependencies. * Fix negative loop bound in cons_tres. * srun - capture the MPI plugin return code from mpi_hook_client_fini() and use as final return code for step failure. * Fix segfault in cli_filter/lua. * Fix --gpu-bind=map_gpu reusability if tasks > elements. * Make sure config_flags on a gres are sent to the slurmctld on node registration. * Prolog/Epilog - Fix missing GPU information. * Fix segfault when using config parser for expanded lines. * Fix bit overlap test function. * Don't accrue time if job begin time is in the future. * Remove accrue time when updating a job start/eligible time to the future. * Fix regression in 20.02.0 that broke --depend=expand. * Reset begin time on job release if it's not in the future. * Fix for recovering burst buffers when using high-availability. * Fix invalid read due to freeing an incorrectly allocated env array. * Update slurmctld -i message to warn about losing data. * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a pending ASAP reboot. Changes in pdsh: - Bring QA to the package build: add %%check stage - Since the build for the SLE-12 HPC Module got fixed, simplify spec file and remove legacy workarounds. - Remove _multibuild file where not needed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-2607,SUSE-SLE-Module-HPC-12-2020-2607 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ Link for SUSE-SU-2020:2607-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007406.html E-Mail link for SUSE-SU-2020:2607-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1007053 SUSE Bug 1007053 https://bugzilla.suse.com/1018371 SUSE Bug 1018371 https://bugzilla.suse.com/1031872 SUSE Bug 1031872 https://bugzilla.suse.com/1041706 SUSE Bug 1041706 https://bugzilla.suse.com/1065697 SUSE Bug 1065697 https://bugzilla.suse.com/1084125 SUSE Bug 1084125 https://bugzilla.suse.com/1084917 SUSE Bug 1084917 https://bugzilla.suse.com/1085240 SUSE Bug 1085240 https://bugzilla.suse.com/1085606 SUSE Bug 1085606 https://bugzilla.suse.com/1086859 SUSE Bug 1086859 https://bugzilla.suse.com/1088693 SUSE Bug 1088693 https://bugzilla.suse.com/1090292 SUSE Bug 1090292 https://bugzilla.suse.com/1095508 SUSE Bug 1095508 https://bugzilla.suse.com/1100850 SUSE Bug 1100850 https://bugzilla.suse.com/1103561 SUSE Bug 1103561 https://bugzilla.suse.com/1108671 SUSE Bug 1108671 https://bugzilla.suse.com/1109373 SUSE Bug 1109373 https://bugzilla.suse.com/1116758 SUSE Bug 1116758 https://bugzilla.suse.com/1123304 SUSE Bug 1123304 https://bugzilla.suse.com/1140709 SUSE Bug 1140709 https://bugzilla.suse.com/1153095 SUSE Bug 1153095 https://bugzilla.suse.com/1153259 SUSE Bug 1153259 https://bugzilla.suse.com/1155784 SUSE Bug 1155784 https://bugzilla.suse.com/1158696 SUSE Bug 1158696 https://bugzilla.suse.com/1159692 SUSE Bug 1159692 https://bugzilla.suse.com/1161716 SUSE Bug 1161716 https://bugzilla.suse.com/1162377 SUSE Bug 1162377 https://bugzilla.suse.com/1164326 SUSE Bug 1164326 https://bugzilla.suse.com/1164386 SUSE Bug 1164386 https://bugzilla.suse.com/1172004 SUSE Bug 1172004 https://bugzilla.suse.com/1173805 SUSE Bug 1173805 https://www.suse.com/security/cve/CVE-2016-10030/ SUSE CVE CVE-2016-10030 page https://www.suse.com/security/cve/CVE-2017-15566/ SUSE CVE CVE-2017-15566 page https://www.suse.com/security/cve/CVE-2018-10995/ SUSE CVE CVE-2018-10995 page https://www.suse.com/security/cve/CVE-2018-7033/ SUSE CVE CVE-2018-7033 page https://www.suse.com/security/cve/CVE-2019-12838/ SUSE CVE CVE-2019-12838 page https://www.suse.com/security/cve/CVE-2019-19727/ SUSE CVE CVE-2019-19727 page https://www.suse.com/security/cve/CVE-2019-19728/ SUSE CVE CVE-2019-19728 page https://www.suse.com/security/cve/CVE-2019-6438/ SUSE CVE CVE-2019-6438 page https://www.suse.com/security/cve/CVE-2020-12693/ SUSE CVE CVE-2020-12693 page SUSE Linux Enterprise Module for HPC 12 libnss_slurm2_20_02-20.02.3-3.5.1 libpmi0_20_02-20.02.3-3.5.1 libslurm35-20.02.3-3.5.1 pdsh-2.34-7.26.2 pdsh-dshgroup-2.34-7.26.2 pdsh-genders-2.34-7.26.2 pdsh-machines-2.34-7.26.2 pdsh-netgroup-2.34-7.26.2 pdsh-slurm-2.34-7.26.2 pdsh-slurm_18_08-2.34-7.26.2 pdsh-slurm_20_02-2.34-7.26.2 perl-slurm_20_02-20.02.3-3.5.1 slurm_20_02-20.02.3-3.5.1 slurm_20_02-auth-none-20.02.3-3.5.1 slurm_20_02-config-20.02.3-3.5.1 slurm_20_02-config-man-20.02.3-3.5.1 slurm_20_02-cray-20.02.3-3.5.1 slurm_20_02-devel-20.02.3-3.5.1 slurm_20_02-doc-20.02.3-3.5.1 slurm_20_02-lua-20.02.3-3.5.1 slurm_20_02-munge-20.02.3-3.5.1 slurm_20_02-node-20.02.3-3.5.1 slurm_20_02-openlava-20.02.3-3.5.1 slurm_20_02-pam_slurm-20.02.3-3.5.1 slurm_20_02-plugins-20.02.3-3.5.1 slurm_20_02-seff-20.02.3-3.5.1 slurm_20_02-sjstat-20.02.3-3.5.1 slurm_20_02-slurmdbd-20.02.3-3.5.1 slurm_20_02-sql-20.02.3-3.5.1 slurm_20_02-sview-20.02.3-3.5.1 slurm_20_02-torque-20.02.3-3.5.1 slurm_20_02-webdoc-20.02.3-3.5.1 libnss_slurm2_20_02-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 libpmi0_20_02-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 libslurm35-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 pdsh-slurm_18_08-2.34-7.26.2 as a component of SUSE Linux Enterprise Module for HPC 12 pdsh-slurm_20_02-2.34-7.26.2 as a component of SUSE Linux Enterprise Module for HPC 12 perl-slurm_20_02-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-auth-none-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-config-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-config-man-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-devel-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-doc-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-lua-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-munge-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-node-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-pam_slurm-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-plugins-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-slurmdbd-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-sql-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-sview-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 slurm_20_02-torque-20.02.3-3.5.1 as a component of SUSE Linux Enterprise Module for HPC 12 The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue. CVE-2016-10030 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2016-10030.html CVE-2016-10030 https://bugzilla.suse.com/1018371 SUSE Bug 1018371 Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution. CVE-2017-15566 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2017-15566.html CVE-2017-15566 https://bugzilla.suse.com/1065697 SUSE Bug 1065697 SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields). CVE-2018-10995 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2018-10995.html CVE-2018-10995 https://bugzilla.suse.com/1095508 SUSE Bug 1095508 SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. CVE-2018-7033 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2018-7033.html CVE-2018-7033 https://bugzilla.suse.com/1085240 SUSE Bug 1085240 SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection. CVE-2019-12838 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2019-12838.html CVE-2019-12838 https://bugzilla.suse.com/1140709 SUSE Bug 1140709 SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions. CVE-2019-19727 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2019-19727.html CVE-2019-19727 https://bugzilla.suse.com/1155784 SUSE Bug 1155784 SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges. CVE-2019-19728 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2019-19728.html CVE-2019-19728 https://bugzilla.suse.com/1155784 SUSE Bug 1155784 https://bugzilla.suse.com/1159692 SUSE Bug 1159692 SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. CVE-2019-6438 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2019-6438.html CVE-2019-6438 https://bugzilla.suse.com/1123304 SUSE Bug 1123304 Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user. CVE-2020-12693 SUSE Linux Enterprise Module for HPC 12:libnss_slurm2_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libpmi0_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:libslurm35-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_18_08-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:pdsh-slurm_20_02-2.34-7.26.2 SUSE Linux Enterprise Module for HPC 12:perl-slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-auth-none-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-config-man-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-devel-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-doc-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-lua-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-munge-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-node-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-pam_slurm-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-plugins-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-slurmdbd-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sql-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-sview-20.02.3-3.5.1 SUSE Linux Enterprise Module for HPC 12:slurm_20_02-torque-20.02.3-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202607-1/ https://www.suse.com/security/cve/CVE-2020-12693.html CVE-2020-12693 https://bugzilla.suse.com/1172004 SUSE Bug 1172004 https://bugzilla.suse.com/1173804 SUSE Bug 1173804