Security update for slurm_18_08 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1856-1 Final 1 1 2021-06-04T06:55:18Z current 2021-06-04T06:55:18Z 2021-06-04T06:55:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for slurm_18_08 This update for slurm_18_08 fixes the following issues: - CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-1856,SUSE-SLE-Product-HPC-15-2021-1856 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211856-1/ Link for SUSE-SU-2021:1856-1 https://lists.suse.com/pipermail/sle-updates/2021-June/019202.html E-Mail link for SUSE-SU-2021:1856-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1186024 SUSE Bug 1186024 https://www.suse.com/security/cve/CVE-2021-31215/ SUSE CVE CVE-2021-31215 page SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS libpmi0_18_08-18.08.9-1.14.1 libslurm33-18.08.9-1.14.1 perl-slurm_18_08-18.08.9-1.14.1 slurm_18_08-18.08.9-1.14.1 slurm_18_08-auth-none-18.08.9-1.14.1 slurm_18_08-config-18.08.9-1.14.1 slurm_18_08-config-man-18.08.9-1.14.1 slurm_18_08-cray-18.08.9-1.14.1 slurm_18_08-devel-18.08.9-1.14.1 slurm_18_08-doc-18.08.9-1.14.1 slurm_18_08-hdf5-18.08.9-1.14.1 slurm_18_08-lua-18.08.9-1.14.1 slurm_18_08-munge-18.08.9-1.14.1 slurm_18_08-node-18.08.9-1.14.1 slurm_18_08-openlava-18.08.9-1.14.1 slurm_18_08-pam_slurm-18.08.9-1.14.1 slurm_18_08-plugins-18.08.9-1.14.1 slurm_18_08-seff-18.08.9-1.14.1 slurm_18_08-sjstat-18.08.9-1.14.1 slurm_18_08-slurmdbd-18.08.9-1.14.1 slurm_18_08-sql-18.08.9-1.14.1 slurm_18_08-sview-18.08.9-1.14.1 slurm_18_08-torque-18.08.9-1.14.1 slurm_18_08-webdoc-18.08.9-1.14.1 libpmi0_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libslurm33-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-slurm_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-auth-none-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-config-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-devel-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-doc-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-lua-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-munge-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-node-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-pam_slurm-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-plugins-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-slurmdbd-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-sql-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS slurm_18_08-torque-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libpmi0_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libslurm33-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-slurm_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-auth-none-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-config-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-devel-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-doc-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-lua-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-munge-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-node-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-pam_slurm-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-plugins-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-slurmdbd-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-sql-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS slurm_18_08-torque-18.08.9-1.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling. CVE-2021-31215 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libpmi0_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libslurm33-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-slurm_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-auth-none-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-config-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-devel-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-doc-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-lua-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-munge-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-node-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-pam_slurm-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-plugins-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-slurmdbd-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-sql-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:slurm_18_08-torque-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libpmi0_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libslurm33-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-slurm_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-auth-none-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-config-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-devel-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-doc-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-lua-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-munge-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-node-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-pam_slurm-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-plugins-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-slurmdbd-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-sql-18.08.9-1.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:slurm_18_08-torque-18.08.9-1.14.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211856-1/ https://www.suse.com/security/cve/CVE-2021-31215.html CVE-2021-31215 https://bugzilla.suse.com/1186024 SUSE Bug 1186024