Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100

SUSE: 2024:0288-1 Important: slurm_20_11 Security Fixes Overview

* bsc#1216207 * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 . # Security update for slurm_20_11 Announcement ID: SUSE-SU-2024:0288-1 Rating: important References: * bsc#1216207 * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053 Cross-References: * CVE-2023-41914 * CVE-2023-49933 * CVE-2023-49936 * CVE-2023-49937 * CVE-2023-49938 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49933 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49933 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-49936 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49936 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2023-49937 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-49938 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49938 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 An update that solves five vulnerabilities and has two security fixes can now be installed. ## Description: This update for slurm_20_11 fixes the following issues: Security fixes: * CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207) * CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046) * CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050) * CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051) * CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053) Other fixes: * Add missing service file for slurmrestd (bsc#1217711). * Fix slurm upgrading to incompatible versions (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-288=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-288=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * perl-slurm_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-munge-20.11.9-150200.6.16.1 * slurm_20_11-debugsource-20.11.9-150200.6.16.1 * slurm_20_11-lua-20.11.9-150200.6.16.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-webdoc-20.11.9-150200.6.16.1 * slurm_20_11-config-man-20.11.9-150200.6.16.1 * slurm_20_11-openlava-20.11.9-150200.6.16.1 * slurm_20_11-sql-20.11.9-150200.6.16.1 * slurm_20_11-20.11.9-150200.6.16.1 * libpmi0_20_11-20.11.9-150200.6.16.1 * slurm_20_11-sjstat-20.11.9-150200.6.16.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-seff-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-20.11.9-150200.6.16.1 * slurm_20_11-cray-20.11.9-150200.6.16.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-plugins-20.11.9-150200.6.16.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-node-20.11.9-150200.6.16.1 * slurm_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-doc-20.11.9-150200.6.16.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.16.1 *slurm_20_11-slurmdbd-20.11.9-150200.6.16.1 * slurm_20_11-torque-20.11.9-150200.6.16.1 * perl-slurm_20_11-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-devel-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-hdf5-20.11.9-150200.6.16.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-rest-20.11.9-150200.6.16.1 * slurm_20_11-sview-20.11.9-150200.6.16.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-config-20.11.9-150200.6.16.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * slurm_20_11-munge-20.11.9-150200.6.16.1 * libslurm36-debuginfo-20.11.9-150200.6.16.1 * slurm_20_11-lua-20.11.9-150200.6.16.1 * slurm_20_11-webdoc-20.11.9-150200.6.16.1 * libslurm36-20.11.9-150200.6.16.1 * slurm_20_11-config-man-20.11.9-150200.6.16.1 * slurm_20_11-sql-20.11.9-150200.6.16.1 * slurm_20_11-20.11.9-150200.6.16.1 * libpmi0_20_11-20.11.9-150200.6.16.1 * slurm_20_11-auth-none-20.11.9-150200.6.16.1 * slurm_20_11-plugins-20.11.9-150200.6.16.1 * slurm_20_11-node-20.11.9-150200.6.16.1 * slurm_20_11-doc-20.11.9-150200.6.16.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.16.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.16.1 * slurm_20_11-torque-20.11.9-150200.6.16.1 * perl-slurm_20_11-20.11.9-150200.6.16.1 * libnss_slurm2_20_11-20.11.9-150200.6.16.1 * slurm_20_11-devel-20.11.9-150200.6.16.1 * slurm_20_11-sview-20.11.9-150200.6.16.1 * slurm_20_11-config-20.11.9-150200.6.16.1 ## References: *https://www.suse.com/security/cve/CVE-2023-41914.html * https://www.suse.com/security/cve/CVE-2023-49933.html * https://www.suse.com/security/cve/CVE-2023-49936.html * https://www.suse.com/security/cve/CVE-2023-49937.html * https://www.suse.com/security/cve/CVE-2023-49938.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869 * https://bugzilla.suse.com/show_bug.cgi?id=1217711 * https://bugzilla.suse.com/show_bug.cgi?id=1218046 * https://bugzilla.suse.com/show_bug.cgi?id=1218050 * https://bugzilla.suse.com/show_bug.cgi?id=1218051 * https://bugzilla.suse.com/show_bug.cgi?id=1218053 . Critical security patch released for slurm_20_11 addresses various vulnerabilities affecting SUSE platforms. Key updates provided.. SUSE Security Update, slurm_20_11, Important Security Patches, Linux Performance Computing. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 31, 2024 Important SuSE
100

SUSE: 2023:4564-1 important: SLURM filesystem race condition

* bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 . # Security update for slurm_23_02 Announcement ID: SUSE-SU-2023:4564-1 Rating: important References: * bsc#1216207 * bsc#1216869 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-41914 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for slurm_23_02 fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207). Bug fixes: * Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4564=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libpmi0_23_02-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-rest-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-pam_slurm-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-slurmdbd-23.02.6-150100.3.14.1 * libnss_slurm2_23_02-23.02.6-150100.3.14.1 * perl-slurm_23_02-23.02.6-150100.3.14.1 * slurm_23_02-sql-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-torque-debuginfo-23.02.6-150100.3.14.1 *slurm_23_02-cray-23.02.6-150100.3.14.1 * slurm_23_02-munge-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-slurmdbd-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-auth-none-23.02.6-150100.3.14.1 * slurm_23_02-devel-23.02.6-150100.3.14.1 * libpmi0_23_02-23.02.6-150100.3.14.1 * slurm_23_02-munge-23.02.6-150100.3.14.1 * slurm_23_02-debugsource-23.02.6-150100.3.14.1 * slurm_23_02-node-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-plugins-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-pam_slurm-23.02.6-150100.3.14.1 * slurm_23_02-sview-23.02.6-150100.3.14.1 * slurm_23_02-sql-23.02.6-150100.3.14.1 * slurm_23_02-node-23.02.6-150100.3.14.1 * slurm_23_02-torque-23.02.6-150100.3.14.1 * slurm_23_02-sview-debuginfo-23.02.6-150100.3.14.1 * libslurm39-23.02.6-150100.3.14.1 * libnss_slurm2_23_02-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-lua-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-lua-23.02.6-150100.3.14.1 * slurm_23_02-plugin-ext-sensors-rrd-23.02.6-150100.3.14.1 * slurm_23_02-23.02.6-150100.3.14.1 * libslurm39-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-auth-none-debuginfo-23.02.6-150100.3.14.1 * perl-slurm_23_02-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-plugins-23.02.6-150100.3.14.1 * slurm_23_02-rest-23.02.6-150100.3.14.1 * slurm_23_02-debuginfo-23.02.6-150100.3.14.1 * slurm_23_02-cray-debuginfo-23.02.6-150100.3.14.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * slurm_23_02-config-23.02.6-150100.3.14.1 * slurm_23_02-config-man-23.02.6-150100.3.14.1 * slurm_23_02-webdoc-23.02.6-150100.3.14.1 * slurm_23_02-doc-23.02.6-150100.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1216207 * https://bugzilla.suse.com/show_bug.cgi?id=1216869 . This update tackles critical key management issues in slurm_23_02for SUSE environments, enhancing security.. SLURM Security Update, SUSE Important Patch, Filesystem Fix, HPC Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 24, 2023 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here