SUSE-SU-2019:3080-1
Security update for slurm
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc (bsc#1123304). - CVE-2019-12838: Fixed an SQL injection (bsc#1140709).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0, libslurm31, perl-slurm and 14 more | 17.02.11-6.33.1 |
Show all 17 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | libpmi0 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | libslurm31 | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | perl-slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-auth-none | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-config | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-devel | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-doc | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-lua | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-munge | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-pam_slurm | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-plugins | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sched-wiki | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdb-direct | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-slurmdbd | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-sql | 17.02.11-6.33.1 |
| SUSE Linux Enterprise 12 | slurm-torque | 17.02.11-6.33.1 |
References
- https://bugzilla.suse.com/1123304
- https://bugzilla.suse.com/1140709
- https://lists.suse.com/pipermail/sle-security-updates/2019-November/006184.html
- https://www.suse.com/security/cve/CVE-2019-12838/
- https://www.suse.com/security/cve/CVE-2019-6438/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2019/suse-su-20193080-1/