Linux · Ubuntu · Package update · May 12, 2021

slurmd 17.11.2-1ubuntu0.1~esm4: slurmd 17.11.2-1ubuntu0.1~esm4 for Ubuntu 18.04.6 LTS (bionic)

slurmd 17.11.2-1ubuntu0.1~esm4, released May 12, 2021, fixes 4 CVEs in slurmd. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0290
87th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 0 Routine 4

Fixed package versions

ProductReleaseFixed in
slurmdUbuntu 18.04.6 LTS (bionic)17.11.2-1ubuntu0.1~esm4

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2021-31215 libpam-slurm: SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser bec...n/a 0.0290 None reported
Routine CVE-2020-12693 libpam-slurm: Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allow...n/a 0.0231 None reported
Routine CVE-2020-27745 libpam-slurm: Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.n/a 0.0224 None reported
Routine CVE-2020-27746 libpam-slurm: Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for...n/a 0.0083 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.