Fedora Update Notification
2022-05-18 01:08:10.052667

Name        : slurm
Product     : Fedora 36
Version     : 21.08.8
Release     : 2.fc36
URL         : https://slurm.schedmd.com/
Summary     : Simple Linux Utility for Resource Management
Description :
Slurm is an open source, fault-tolerant, and highly scalable
cluster management and job scheduling system for Linux clusters.
Components include machine status, partition management,
job management, scheduling and accounting modules.

Update Information:

Update to 21.08.8 to fix CVE-2022-29500, CVE-2022-29501, and CVE-2022-29502.

* Mon May  9 2022 Philip Kovacs  - 21.08.8-2
- Update to 21.08.8-2 (upstream re-release)
* Thu May  5 2022 Carl George  - 21.08.8-1
- Update to 21.08.8, resolves: rhbz#2082276
- Fix CVE-2022-29500, resolves: rhbz#2082286
- Fix CVE-2022-29501, resolves: rhbz#2082289
- Fix CVE-2022-29502, resolves: rhbz#2082293

  [ 1 ] Bug #2082276 - slurm-21.08.8 is available
  [ 2 ] Bug #2082286 - CVE-2022-29500 slurm: SchedMD has Incorrect Access Control that leads to Information Disclosure. [fedora-all]
  [ 3 ] Bug #2082289 - CVE-2022-29501 slurm: usage leads to unprivileged access to send arbritary unix socket as root [fedora-all]
  [ 4 ] Bug #2082293 - CVE-2022-29502 slurm: I/O key validation allows attacker to intercept communication [fedora-all]

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-916bb58e38' at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure