SUSE-SU-2020:0434-1

Dashboard / Vulnerabilities / SUSE-SU-2020:0434-1

SUSE-SU-2020:0434-1

Summary: Security update for pdsh, slurm_18_08

Details: This update for pdsh, slurm_18_08 fixes the following issues: Slurm was included in the 18.08 release, as 'slurm_18_08' package. The version 18.08.9 contains all recent security fixes, including: - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692). - CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784). pdsh was updated to: - Add support for an alternative SLURM version when building the slurm plugin.

References: https://www.suse.com/support/update/announcement/2020/suse-su-20200434-1/, https://bugzilla.suse.com/1018371, https://bugzilla.suse.com/1065697, https://bugzilla.suse.com/1085240, https://bugzilla.suse.com/1095508, https://bugzilla.suse.com/1123304, https://bugzilla.suse.com/1140709, https://bugzilla.suse.com/1155784, https://bugzilla.suse.com/1158709, https://bugzilla.suse.com/1158798, https://bugzilla.suse.com/1159692, https://www.suse.com/security/cve/CVE-2016-10030, https://www.suse.com/security/cve/CVE-2017-15566, https://www.suse.com/security/cve/CVE-2018-10995, https://www.suse.com/security/cve/CVE-2018-7033, https://www.suse.com/security/cve/CVE-2019-12838, https://www.suse.com/security/cve/CVE-2019-19727, https://www.suse.com/security/cve/CVE-2019-19728, https://www.suse.com/security/cve/CVE-2019-6438