Vulnerabilities / SUSE-SU-2020:0434-1

critical

SUSE-SU-2020:0434-1

Security update for pdsh, slurm_18_08

In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

No source gives a CVSS score.

Trivy's own label is CRITICAL. Rated critical by SUSE.

Description

This update for pdsh, slurm_18_08 fixes the following issues: Slurm was included in the 18.08 release, as 'slurm_18_08' package. The version 18.08.9 contains all recent security fixes, including: - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692). - CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784). pdsh was updated to: - Add support for an alternative SLURM version when building the slurm plugin.

Affected packages and fixed versions

SourcePackageFixed in
SUSE Linux Enterprise 12libpmi0_18_08, libslurm33, pdsh and 20 more18.08.9-3.5.1 and 1 more
Show all 23 entries from 1 source
SourcePackageFixed in
SUSE Linux Enterprise 12libpmi0_18_0818.08.9-3.5.1
SUSE Linux Enterprise 12libslurm3318.08.9-3.5.1
SUSE Linux Enterprise 12pdsh2.33-7.18.1
SUSE Linux Enterprise 12pdsh-dshgroup2.33-7.18.1
SUSE Linux Enterprise 12pdsh-genders2.33-7.18.1
SUSE Linux Enterprise 12pdsh-machines2.33-7.18.1
SUSE Linux Enterprise 12pdsh-netgroup2.33-7.18.1
SUSE Linux Enterprise 12pdsh-slurm2.33-7.18.1
SUSE Linux Enterprise 12pdsh-slurm_18_082.33-7.18.1
SUSE Linux Enterprise 12perl-slurm_18_0818.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_0818.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-auth-none18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-config18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-devel18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-doc18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-lua18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-munge18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-node18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-pam_slurm18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-plugins18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-slurmdbd18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-sql18.08.9-3.5.1
SUSE Linux Enterprise 12slurm_18_08-torque18.08.9-3.5.1

References

All 21 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.