SUSE-SU-2019:3080-1
Security update for slurm
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc (bsc#1123304). - CVE-2019-12838: Fixed an SQL injection (bsc#1140709).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0, libslurm31, perl-slurm y 14 más | 17.02.11-6.33.1 |
Mostrar las 17 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | libslurm31 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | perl-slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-auth-none | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-config | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-devel | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-doc | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-lua | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-munge | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-pam_slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-plugins | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sched-wiki | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdb-direct | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdbd | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sql | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-torque | 17.02.11-6.33.1 |
Referencias
- https://bugzilla.suse.com/1123304
- https://bugzilla.suse.com/1140709
- https://lists.suse.com/pipermail/sle-security-updates/2019-November/006184.html
- https://www.suse.com/security/cve/CVE-2019-12838/
- https://www.suse.com/security/cve/CVE-2019-6438/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2019/suse-su-20193080-1/