SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade slurm_22_05-crayUpgrade slurm_22_05-auth-noneUpgrade pdsh-dshgroupUpgrade pdsh-slurm_18_08Upgrade slurm_22_05-webdocUpgrade pdsh-slurm_22_05Upgrade libslurm38Upgrade slurm_22_05-torqueUpgrade libpmi0_22_05Upgrade pdsh-slurm_20_11Upgrade slurm_22_05Upgrade slurm_22_05-hdf5Upgrade slurm_22_05-pam_slurmUpgrade slurm_22_05-config-manUpgrade slurm_22_05-openlavaUpgrade slurm_22_05-configUpgrade slurm_22_05-develUpgrade slurm_22_05-sqlUpgrade slurm_22_05-luaUpgrade slurm_22_05-sviewUpgrade slurm_22_05-nodeUpgrade slurm_22_05-slurmdbdUpgrade slurm_22_05-testsuiteUpgrade pdshUpgrade pdsh-machinesUpgrade pdsh-gendersUpgrade slurm_22_05-mungeUpgrade pdsh-slurm_20_02Upgrade slurm_22_05-seffUpgrade slurm_22_05-docUpgrade perl-slurm_22_05Upgrade slurm_22_05-sjstatUpgrade slurm_22_05-pluginsUpgrade pdsh-slurmUpgrade slurm_22_05-restUpgrade pdsh-netgroupUpgrade libnss_slurm2_22_05 | Dec 1, 2022 | Nov 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub