{
  "cveId": "CVE-2024-42511",
  "url": "https://patchblox.com/security/cve/CVE-2024-42511",
  "summary": "CVE-2024-42511 is fixed in 5 products on 1 platform, first by SUSE-FU-2025:0660-1, released February 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "pdsh: This update for slurm and pdsh fixes the following issues:\n\nslurm was updated to version 24.11.1 using package slurm_...",
  "description": "This update for slurm and pdsh fixes the following issues:\n\nslurm was updated to version 24.11.1 using package slurm_24_11:\n\n- Security issues fixed:\n  * CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker \n    to execute processes under other users\u0027 jobs (bsc#1236722)\n  * CVE-2024-42511: Fixed vulnerability with switch plugins where a user could override the \n    isolation between Slingshot VNIs or IMEX channels (bsc#1236726)\n\n- Important remarks:\n  * Slurm can be upgraded from version 23.02, 23.11 or 24.05 to version\n    24.11 without loss of jobs or other state information. Upgrading directly from\n    an earlier version of Slurm will result in loss of state information.\n  * If using the \u0060slurmdbd\u0060 (Slurm DataBase Daemon) you must update this first.\n  * The 24.11 \u0060slurmdbd\u0060 will work with Slurm daemons of version 23.02 and above.\n    You will not need to update all clusters at the same time, but it is very\n    important to update \u0060slurmdbd\u0060 first and having it running before updating\n    any other clusters making use of it.\n  * If using a backup DBD you must start the primary first to do any\n    database conversion, the backup will not start until this has happened.\n  * All SPANK plugins must be recompiled when upgrading from any Slurm version\n    prior to 24.11.\n\n- Highlights of changes:\n  * Fixed issues related to the modified startup handling for slurmdbd: \n    moved PID file to \u0060/run/slurmdbd\u0060 (bsc#1236928)\n  * Create slurm-owned log file on behalf of slurmdbd (bsc#1236929)\n  * Added report AccountUtilizationByQOS to sreport.\n  * \u0060AccountUtilizationByUser\u0060 is able to be filtered by QOS.\n  * Added autodetected gpus to the output of \u0060slurmd -C\u0060\n  * Added ability to submit jobs with multiple QOS. These are sorted by priority\n   highest being the first.\n  * Removed the instant on feature from \u0060switch/hpe_slingshot\u0060.\n  * \u0060slurmctld\u0060 : Changed incoming RPC handling to dedicated thread pool with\n    asynchronous handling of I/O that can be configured via \u0060conmgr_*\u0060 entries\n    under \u0060SlurmctldParameters\u0060 in \u0060slurm.conf\u0060.\n\n- Configuration File Changes (see appropriate man page for details)\n  * Added \u0060SchedulerParameters=bf_allow_magnetic_slot\u0060 option. It allows jobs in\n    magnetic reservations to be planned by backfill scheduler.\n  * Added \u0060TopologyParam=TopoMaxSizeUnroll=#\u0060 to allow \u0060--nodes=\u003Cmin\u003E-\u003Cmax\u003E\u0060 for\n    \u0060topology/block\u0060.\n  * Added \u0060DataParserParameters\u0060 \u0060slurm.conf\u0060 parameter to allow setting default\n    value for CLI \u0060--json\u0060 and \u0060--yaml\u0060 arguments.\n  * Hardware collectives in \u0060switch/hpe_slingshot\u0060 now requires \u0060enable_stepmgr\u0060.\n  * Added connection related parameters to \u0060slurm.conf\u0060 under\n    \u0060SlurmctldParameters\u0060:  \n    \u0060conmgr_max_connections\u0060: Defaults to 150 connections.  \n    \u0060conmgr_threads\u0060: Defaults to 64 threads for slurmctld.  \n    \u0060conmgr_use_poll\u0060: Defaults is to use epoll in Linux.  \n    \u0060conmgr_connect_timeout\u0060: Defaults to \u0060MessageTimeout\u0060.  \n    \u0060conmgr_read_timeout\u0060: Defaults to \u0060MessageTimeout\u0060.  \n    \u0060conmgr_wait_write_delay\u0060: Defaults to \u0060MessageTimeout\u0060.  \n    \u0060conmgr_write_timeout\u0060: Defaults to MessageTimeout.  \n  * Added \u0060SlurmctldParamters=ignore_constraint_validation\u0060 to ignore\n    \u0060constraint/feature\u0060 validation at submission.\n  * Added \u0060SchedulerParameters=bf_topopt_enable\u0060 option to enable experimental hook\n    to control backfill.\n\n- Command Changes (see man pages for details):\n  * Remove srun \u0060--cpu-bind=rank\u0060.\n  * Add \u0060\u0027%b\u0027\u0060 as a file name pattern for the array task id modulo 10.\n  * \u0060sacct\u0060 : Respect \u0060--noheader\u0060 for \u0060--batch-script\u0060 and \u0060--env-vars\u0060.\n  * Add \u0060sacctmgr ping\u0060 command to query status of \u0060slurmdbd\u0060.\n  * \u0060sbcast\u0060 : Add \u0060--nodelist\u0060 option to specify where files are transmitted to\n  * \u0060sbcast\u0060 : Add \u0060--no-allocation\u0060 option to transmit files to nodes outside\n    of a  job allocation.\n  * \u0060slurmdbd\u0060 : Add \u0060-u\u0060 option. This is used to determine if restarting the DBD\n    will result in database conversion.\n  * Remove \u0060salloc --get-user-env\u0060.\n  * \u0060scontrol\u0060 : Add \u0060--json\u0060/\u0060--yaml\u0060 support to \u0060listpids\u0060.\n  * \u0060scontrol\u0060 : Add \u0060liststeps\u0060.\n  * \u0060scontrol\u0060 : Add \u0060listjobs\u0060.\n  * \u0060scontrol show topo\u0060 : Show aggregated block sizes when using topology/block.\n\n- API Changes:\n  * Remove \u0060burst_buffer/lua\u0060 call \u0060slurm.job_info_to_string()\u0060.\n  * \u0060job_submit/lua\u0060 : Add \u0060assoc_qos\u0060 attribute to \u0060job_desc\u0060 to display all\n    potential QOS\u0027s for a job\u0027s association.\n  * \u0060job_submit/lua\u0060 : Add \u0060slurm.get_qos_priority()\u0060 function to retrieve the\n    given QOS\u0027s priority.\n\n- SLURMRESTD Changes:\n * Removed fields deprecated in the Slurm-23.11 release from v0.0.42 endpoints.\n * Removed v0.0.39 plugins.\n * Set \u0060data_parser/v0.0.42\u002Bprefer_refs\u0060 flag to default.\n * Add \u0060data_parser/v0.0.42\u002Bminimize_refs\u0060 flag to inline single referenced\n   schemas in the OpenAPI schema to get default behavior of\n  \u0060data_parser/v0.0.41\u0060.\n * Rename v0.0.42 \u0060JOB_INFO\u0060 field \u0060minimum_switches\u0060 to \u0060required_switches\u0060\n   to reflect the actual behavior.\n * Rename v0.0.42 \u0060ACCOUNT_CONDITION\u0060 field \u0060assocation\u0060 to \u0060association\u0060\n   (typo).\n * Tag \u0060slurmdb/v0.0.42/jobs pid\u0060 field deprecated.\n\n- For details on the changes in this version update, consult Slurm 24.11 changelog\n\npdsh:\n    \n- Fix version test for munge build (bsc#1236156)\n- Dropped Slurm support for s390x and i586: Slurm no longer\n  builds for s390x or 32bit\n- Implementation of package \u0060pdsh-slurm_24_11\u0060 compatible with Slurm 24.11",
  "published": "2025-02-24T02:10:33Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "pdsh",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.35-150500.46.6.3",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "pdsh",
      "release": "sles 15.6",
      "fixedVersion": "2.35-150500.46.6.3",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "pdsh_slurm_22_05",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.35-150300.54.3",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "pdsh_slurm_23_02",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.35-150300.54.3",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "pdsh_slurm_24_11",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.35-150500.46.6.2",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "pdsh_slurm_24_11",
      "release": "sles 15.6",
      "fixedVersion": "2.35-150500.46.6.2",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "slurm_24_11",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "24.11.1-150300.7.5.1",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    },
    {
      "platform": "linux",
      "product": "slurm_24_11",
      "release": "sles 15.6",
      "fixedVersion": "24.11.1-150300.7.5.1",
      "fix": "SUSE-FU-2025:0660-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2025-0660-1",
      "released": "2025-02-24T02:10:33Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}