SUSE-SU-2020:0443-1
Security update for pdsh, slurm_18_08
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for pdsh, slurm_18_08 fixes the following issues: Slurm was included in the 18.08 release, as 'slurm_18_08' package. The version 18.08.9 contains all recent security fixes, including: - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692). - CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784). pdsh was updated to: - Add support for an alternative SLURM version when building the slurm plugin.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | libpmi0_18_08, libslurm33, pdsh y 20 más | 18.08.9-1.5.2 y 1 más |
| SUSE Linux Enterprise 15.1 | pdsh, pdsh-dshgroup, pdsh-genders y 4 más | 2.33-7.6.1 |
Mostrar las 30 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | libpmi0_18_08 | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | libslurm33 | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | pdsh | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-dshgroup | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-genders | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-machines | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-netgroup | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-slurm | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | pdsh-slurm_18_08 | 2.33-7.6.1 |
| SUSE Linux Enterprise 15 | perl-slurm_18_08 | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08 | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-auth-none | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-config | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-devel | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-doc | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-lua | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-munge | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-node | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-pam_slurm | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-plugins | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-slurmdbd | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-sql | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15 | slurm_18_08-torque | 18.08.9-1.5.2 |
| SUSE Linux Enterprise 15.1 | pdsh | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-dshgroup | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-genders | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-machines | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-netgroup | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-slurm | 2.33-7.6.1 |
| SUSE Linux Enterprise 15.1 | pdsh-slurm_18_08 | 2.33-7.6.1 |
Referencias
- https://bugzilla.suse.com/1018371
- https://bugzilla.suse.com/1065697
- https://bugzilla.suse.com/1085240
- https://bugzilla.suse.com/1095508
- https://bugzilla.suse.com/1123304
- https://bugzilla.suse.com/1140709
- https://bugzilla.suse.com/1155784
- https://bugzilla.suse.com/1158709
Las 21 referencias
- https://bugzilla.suse.com/1158798
- https://bugzilla.suse.com/1159692
- https://lists.suse.com/pipermail/sle-security-updates/2020-February/006517.html
- https://www.suse.com/security/cve/CVE-2016-10030/
- https://www.suse.com/security/cve/CVE-2017-15566/
- https://www.suse.com/security/cve/CVE-2018-10995/
- https://www.suse.com/security/cve/CVE-2018-7033/
- https://www.suse.com/security/cve/CVE-2019-12838/
- https://www.suse.com/security/cve/CVE-2019-19727/
- https://www.suse.com/security/cve/CVE-2019-19728/
- https://www.suse.com/security/cve/CVE-2019-6438/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2020/suse-su-20200443-1/