Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

SUSE: 2020:2607-1 Moderate: pdsh, slurm_20_02 Fixes Multiple Issues

suse
Calendar Grey September 11, 2020
Dist Suse Esm H88
SUSE Security Bulletin for pdsh and slurm_20_02 releases patches addressing several vulnerabilities and improvements.
An update that solves 9 vulnerabilities, contains four features and has 22 fixes is now available

Summary

This update for pdsh, slurm_20_02 fixes the following issues: Changes in slurm_20_02: - Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805). - Do not run %check on SLE-12-SP2: Some incompatibility in tcl makes this fail. - Remove unneeded build dependency to postgresql-devel. - Disable build on s390 (requires 64bit). - Bring QA to the package build: add %%check stage. - Remove cruft that isn't needed any longer. - Add 'ghosted' run-file. - Add rpmlint filter to handle issues with library packages for Leap and enterprise upgrade versions. - Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004). - Other changes are: * Factor in ntasks-per-core=1 with cons_tres. * Fix formatting in error message in cons_tres. * Fix calling stat on a NULL variable.

References

#1007053 #1018371 #1031872 #1041706 #1065697

#1084125 #1084917 #1085240 #1085606 #1086859

#1088693 #1090292 #1095508 #1100850 #1103561

#1108671 #1109373 #1116758 #1123304 #1140709

#1153095 #1153259 #1155784 #1158696 #1159692

#1161716 #1162377 #1164326 #1164386 #1172004

#1173805 SLE-10800 SLE-7341 SLE-7342 SLE-8491

Cross- CVE-2016-10030 CVE-2017-15566 CVE-2018-10995

CVE-2018-7033 CVE-2019-12838 CVE-2019-19727

CVE-2019-19728 CVE-2019-6438 CVE-2020-12693

Affected Products:

SUSE Linux Enterprise Module for HPC 12

https://www.suse.com/security/cve/CVE-2016-10030.html

https://www.suse.com/security/cve/CVE-2017-15566.html

https://www.suse.com/security/cve/CVE-2018-10995.html

https://www.suse.com/security/cve/CVE-2018-7033.html

Announcement ID: SUSE-SU-2020:2607-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here