Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5166-1] slurm-wlm security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5166-1] slurm-wlm security update


Chronologisch Thread  
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5166-1] slurm-wlm security update
  • Date: Mon, 20 Jun 2022 10:09:27 +0000
  • Authentication-results: mail.piratenpartei.de; dkim=none; dmarc=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"
  • List-archive: https://lists.debian.org/msgid-search/20220620100927.GB24229 AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=4AXNpQghC4k0wjMUqOHGawa5YLI2QzyFRuydT9qV3Xw=; b=uF r6f5WruS4tPsPF5yMR1YsDBuWWyc/GGd0uH9ufPqcMnx+ay8emtqYboOqldZxPe6i5Jb92XE20xhj YxH7kBGZ0yq3mny/PFEWurYwuRrdY7p0HHK+B6hHpIREr3H71qI/Y0UaQnxS63kVgSumyQiqYv36i h+wDmRgsAlbSJg6gusCZ6IFIamuOkQj+1GN5avmQIj0jYAxUuelV0RMqvhRxLd9SbJvckKG3FMGC7 ZPzk8pVgTOcmGB8HouQVxDAewVWVRc8P/WY+VMhIG4TBDapYsWBF0DZuygVRpfQIdWpKYecHEMmDD kEylq4TCYYoTqbqJAlB1OZWlJ+uP4XLQ==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Mon, 20 Jun 2022 10:09:47 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <jWiBsygPgq.A.Lb.qdEsiB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5166-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
June 20, 2022 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : slurm-wlm
CVE ID : CVE-2022-29500 CVE-2022-29501
Debian Bug : 1010633 1010634

Two security issues were discovered in the Simple Linux Utility for
Resource Management (SLURM), a cluster resource management and job
scheduling system, which could result in privilege escalation.

For the stable distribution (bullseye), these problems have been fixed in
version 20.11.7+really20.11.4-2+deb11u1.

We recommend that you upgrade your slurm-wlm packages.

For the detailed security status of slurm-wlm please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/slurm-wlm

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=kFp/
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5166-1] slurm-wlm security update, Moritz Muehlenhoff, 20.06.2022

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang