SUSE-SU-2019:3080-1
Security update for slurm
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc (bsc#1123304). - CVE-2019-12838: Fixed an SQL injection (bsc#1140709).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0, libslurm31, perl-slurm et 14 autres | 17.02.11-6.33.1 |
Afficher les 17 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | libslurm31 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | perl-slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-auth-none | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-config | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-devel | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-doc | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-lua | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-munge | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-pam_slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-plugins | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sched-wiki | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdb-direct | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdbd | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sql | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-torque | 17.02.11-6.33.1 |
Références
- https://bugzilla.suse.com/1123304
- https://bugzilla.suse.com/1140709
- https://lists.suse.com/pipermail/sle-security-updates/2019-November/006184.html
- https://www.suse.com/security/cve/CVE-2019-12838/
- https://www.suse.com/security/cve/CVE-2019-6438/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2019/suse-su-20193080-1/