November 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2023:4338-1: important: Security update for xorg-x11-server
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2023:4338-1 Rating: important References: * bsc#1216133 * bsc#1216135 * bsc#1216261 Cross-References: * CVE-2023-5367 * CVE-2023-5380 * CVE-2023-5574 CVSS scores: * CVE-2023-5367 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5380 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5380 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5574 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2023-5574 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP4 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). * CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133). * CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4338=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4338=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4338=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4338=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4338=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4338=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4338=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4338=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4338=1 * SUSE Linux Enterprise Workstation Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-4338=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-4338=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4338=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4338=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4338=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * SUSE Manager Proxy 4.2 (x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP4 (x86_64) * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-wayland-1.20.3-150200.22.5.79.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-extra-1.20.3-150200.22.5.79.1 * xorg-x11-server-1.20.3-150200.22.5.79.1 * xorg-x11-server-debugsource-1.20.3-150200.22.5.79.1 * xorg-x11-server-debuginfo-1.20.3-150200.22.5.79.1 * xorg-x11-server-sdk-1.20.3-150200.22.5.79.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5367.html * https://www.suse.com/security/cve/CVE-2023-5380.html * https://www.suse.com/security/cve/CVE-2023-5574.html * https://bugzilla.suse.com/show_bug.cgi?id=1216133 * https://bugzilla.suse.com/show_bug.cgi?id=1216135 * https://bugzilla.suse.com/show_bug.cgi?id=1216261

1 0

SUSE-RU-2023:4340-1: moderate: Recommended update for kubernetes1.28
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for kubernetes1.28 Announcement ID: SUSE-RU-2023:4340-1 Rating: moderate References: * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for kubernetes1.28 fixes the following issues: This update ships the kubernetes1.28-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4340=1 openSUSE-SLE-15.4-2023-4340=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4340=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4340=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4340=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-apiserver-1.28.2-150400.9.3.3 * kubernetes1.28-kubelet-common-1.28.2-150400.9.3.3 * kubernetes1.28-kubelet-1.28.2-150400.9.3.3 * kubernetes1.28-proxy-1.28.2-150400.9.3.3 * kubernetes1.28-scheduler-1.28.2-150400.9.3.3 * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * kubernetes1.28-controller-manager-1.28.2-150400.9.3.3 * kubernetes1.28-kubeadm-1.28.2-150400.9.3.3 * openSUSE Leap 15.4 (noarch) * kubernetes1.28-client-fish-completion-1.28.2-150400.9.3.3 * kubernetes1.28-client-bash-completion-1.28.2-150400.9.3.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.28-client-1.28.2-150400.9.3.3 * kubernetes1.28-client-common-1.28.2-150400.9.3.3 ## References: * https://jira.suse.com/browse/PED-5839

1 0

SUSE-RU-2023:4341-1: moderate: Recommended update for kubernetes1.27
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for kubernetes1.27 Announcement ID: SUSE-RU-2023:4341-1 Rating: moderate References: * bsc#1213829 * bsc#1214406 * jsc#PED-5839 Affected Products: * Containers Module 15-SP4 * Containers Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has two fixes can now be installed. ## Description: This update for kubernetes1.27 fixes the following issues: This update ships the kubernetes1.27-client package. (jsc#PED-5839) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4341=1 openSUSE-SLE-15.4-2023-4341=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4341=1 * Containers Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2023-4341=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4341=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-apiserver-1.27.6-150400.9.3.2 * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-controller-manager-1.27.6-150400.9.3.2 * kubernetes1.27-kubelet-common-1.27.6-150400.9.3.2 * kubernetes1.27-proxy-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * kubernetes1.27-kubelet-1.27.6-150400.9.3.2 * kubernetes1.27-kubeadm-1.27.6-150400.9.3.2 * kubernetes1.27-scheduler-1.27.6-150400.9.3.2 * openSUSE Leap 15.4 (noarch) * kubernetes1.27-client-fish-completion-1.27.6-150400.9.3.2 * kubernetes1.27-client-bash-completion-1.27.6-150400.9.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * Containers Module 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.27-client-1.27.6-150400.9.3.2 * kubernetes1.27-client-common-1.27.6-150400.9.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213829 * https://bugzilla.suse.com/show_bug.cgi?id=1214406 * https://jira.suse.com/browse/PED-5839

1 0

SUSE-RU-2023:4332-1: moderate: Recommended update for slurm
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for slurm Announcement ID: SUSE-RU-2023:4332-1 Rating: moderate References: * bsc#1215437 Affected Products: * HPC Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that has one fix can now be installed. ## Description: This update for slurm fixes the following issues: * Updated to version 23.02.5 with the following changes: * Bug Fixes: * Revert a change in 23.02 where `SLURM_NTASKS` was no longer set in the job's environment when `--ntasks-per-node` was requested. The method that is is being set, however, is different and should be more accurate in more situations. * Change pmi2 plugin to honor the `SrunPortRange` option. This matches the new behavior of the pmix plugin in 23.02.0. Note that neither of these plugins makes use of the `MpiParams=ports=` option, and previously were only limited by the systems ephemeral port range. * Fix regression in 23.02.2 that caused slurmctld -R to crash on startup if a node features plugin is configured. * Fix and prevent reoccurring reservations from overlapping. * `job_container/tmpfs` \- Avoid attempts to share BasePath between nodes. * With `CR_Cpu_Memory`, fix node selection for jobs that request gres and `--mem-per-cpu`. * Fix a regression from 22.05.7 in which some jobs were allocated too few nodes, thus overcommitting cpus to some tasks. * Fix a job being stuck in the completing state if the job ends while the primary controller is down or unresponsive and the backup controller has not yet taken over. * Fix `slurmctld` segfault when a node registers with a configured `CpuSpecList` while `slurmctld` configuration has the node without `CpuSpecList`. * Fix cloud nodes getting stuck in `POWERED_DOWN+NO_RESPOND` state after not registering by `ResumeTimeout`. * `slurmstepd` \- Avoid cleanup of `config.json-less` containers spooldir getting skipped. * Fix scontrol segfault when 'completing' command requested repeatedly in interactive mode. * Properly handle a race condition between `bind()` and `listen()` calls in the network stack when running with SrunPortRange set. * Federation - Fix revoked jobs being returned regardless of the `-a`/`--all` option for privileged users. * Federation - Fix canceling pending federated jobs from non-origin clusters which could leave federated jobs orphaned from the origin cluster. * Fix sinfo segfault when printing multiple clusters with `--noheader` option. * Federation - fix clusters not syncing if clusters are added to a federation before they have registered with the dbd. * `node_features/helpers` \- Fix node selection for jobs requesting changeable. features with the `|` operator, which could prevent jobs from running on some valid nodes. * `node_features/helpers` \- Fix inconsistent handling of `&` and `|`, where an AND'd feature was sometimes AND'd to all sets of features instead of just the current set. E.g. `foo|bar&baz` was interpreted as `{foo,baz}` or `{bar,baz}` instead of how it is documented: `{foo} or {bar,baz}`. * Fix job accounting so that when a job is requeued its allocated node count is cleared. After the requeue, sacct will correctly show that the job has 0 `AllocNodes` while it is pending or if it is canceled before restarting. * `sacct` \- `AllocCPUS` now correctly shows 0 if a job has not yet received an allocation or if the job was canceled before getting one. * Fix intel OneAPI autodetect: detect the `/dev/dri/renderD[0-9]+` GPUs, and do not detect `/dev/dri/card[0-9]+`. * Fix node selection for jobs that request `--gpus` and a number of tasks fewer than GPUs, which resulted in incorrectly rejecting these jobs. * Remove `MYSQL_OPT_RECONNECT` completely. * Fix cloud nodes in `POWERING_UP` state disappearing (getting set to `FUTURE`) when an `scontrol reconfigure` happens. * `openapi/dbv0.0.39` \- Avoid assert / segfault on missing coordinators list. * `slurmrestd` \- Correct memory leak while parsing OpenAPI specification templates with server overrides. * Fix overwriting user node reason with system message. * Prevent deadlock when `rpc_queue` is enabled. * `slurmrestd` \- Correct OpenAPI specification generation bug where fields with overlapping parent paths would not get generated. * Fix memory leak as a result of a partition info query. * Fix memory leak as a result of a job info query. * For step allocations, fix `--gres=none` sometimes not ignoring gres from the job. * Fix `--exclusive` jobs incorrectly gang-scheduling where they shouldn't. * Fix allocations with `CR_SOCKET`, gres not assigned to a specific socket, and block core distribion potentially allocating more sockets than required. * Revert a change in 23.02.3 where Slurm would kill a script's process group as soon as the script ended instead of waiting as long as any process in that process group held the stdout/stderr file descriptors open. That change broke some scripts that relied on the previous behavior. Setting time limits for scripts (such as `PrologEpilogTimeout`) is strongly encouraged to avoid Slurm waiting indefinitely for scripts to finish. * Fix `slurmdbd -R` not returning an error under certain conditions. * `slurmdbd` \- Avoid potential NULL pointer dereference in the mysql plugin. * Fix regression in 23.02.3 which broken X11 forwarding for hosts when MUNGE sends a localhost address in the encode host field. This is caused when the node hostname is mapped to 127.0.0.1 (or similar) in `/etc/hosts`. * `openapi/[db]v0.0.39` \- fix memory leak on parsing error. * `data_parser/v0.0.39` \- fix updating qos for associations. * `openapi/dbv0.0.39` \- fix updating values for associations with null users. * Fix minor memory leak with `--tres-per-task` and licenses. * Fix cyclic socket cpu distribution for tasks in a step where `--cpus-per-task` < usable threads per core. * `slurmrestd` \- For `GET /slurm/v0.0.39/node[s]`, change format of node's energy field `current_watts` to a dictionary to account for unset value instead of dumping 4294967294. * `slurmrestd` \- For `GET /slurm/v0.0.39/qos`, change format of QOS's field "priority" to a dictionary to account for unset value instead of dumping 4294967294. * slurmrestd - For `GET /slurm/v0.0.39/job[s]`, the 'return code' code field in `v0.0.39_job_exit`_code will be set to -127 instead of being left unset where job does not have a relevant return code. * Other Changes: * Remove --uid / --gid options from salloc and srun commands. These options did not work correctly since the CVE-2022-29500 fix in combination with some changes made in 23.02.0. * Add the `JobId` to `debug()` messages indicating when `cpus_per_task/mem_per_cpu` or `pn_min_cpus` are being automatically adjusted. * Change the log message warning for rate limited users from verbose to info. * `slurmstepd` \- Cleanup per task generated environment for containers in spooldir. * Format batch, extern, interactive, and pending step ids into strings that are human readable. * `slurmrestd` \- Reduce memory usage when printing out job CPU frequency. * `data_parser/v0.0.39` \- Add `required/memory_per_cpu` and `required/memory_per_node` to `sacct --json` and `sacct --yaml` and `GET /slurmdb/v0.0.39/jobs` from slurmrestd. * `gpu/oneapi` \- Store cores correctly so CPU affinity is tracked. * Allow `slurmdbd -R` to work if the root assoc id is not 1. * Limit periodic node registrations to 50 instead of the full `TreeWidth`. Since unresolvable `cloud/dynamic` nodes must disable fanout by setting `TreeWidth` to a large number, this would cause all nodes to register at once. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4332=1 openSUSE-SLE-15.5-2023-4332=1 * HPC Module 15-SP5 zypper in -t patch SUSE-SLE-Module-HPC-15-SP5-2023-4332=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4332=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-hdf5-debuginfo-23.02.5-150500.5.9.2 * slurm-hdf5-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * libslurm39-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-testsuite-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * libslurm39-23.02.5-150500.5.9.2 * openSUSE Leap 15.5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-seff-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * slurm-sjstat-23.02.5-150500.5.9.2 * slurm-openlava-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 * HPC Module 15-SP5 (aarch64 x86_64) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugin-ext-sensors-rrd-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * libslurm39-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * libslurm39-23.02.5-150500.5.9.2 * HPC Module 15-SP5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * SUSE Package Hub 15 15-SP5 (ppc64le s390x) * slurm-pam_slurm-debuginfo-23.02.5-150500.5.9.2 * libpmi0-23.02.5-150500.5.9.2 * slurm-hdf5-debuginfo-23.02.5-150500.5.9.2 * slurm-hdf5-23.02.5-150500.5.9.2 * slurm-munge-debuginfo-23.02.5-150500.5.9.2 * slurm-cray-23.02.5-150500.5.9.2 * slurm-sview-debuginfo-23.02.5-150500.5.9.2 * slurm-torque-debuginfo-23.02.5-150500.5.9.2 * slurm-rest-debuginfo-23.02.5-150500.5.9.2 * slurm-lua-23.02.5-150500.5.9.2 * slurm-slurmdbd-23.02.5-150500.5.9.2 * slurm-lua-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-debuginfo-23.02.5-150500.5.9.2 * slurm-auth-none-23.02.5-150500.5.9.2 * slurm-slurmdbd-debuginfo-23.02.5-150500.5.9.2 * slurm-node-debuginfo-23.02.5-150500.5.9.2 * slurm-pam_slurm-23.02.5-150500.5.9.2 * slurm-devel-23.02.5-150500.5.9.2 * perl-slurm-debuginfo-23.02.5-150500.5.9.2 * slurm-plugins-debuginfo-23.02.5-150500.5.9.2 * slurm-sql-debuginfo-23.02.5-150500.5.9.2 * libpmi0-debuginfo-23.02.5-150500.5.9.2 * slurm-munge-23.02.5-150500.5.9.2 * slurm-node-23.02.5-150500.5.9.2 * perl-slurm-23.02.5-150500.5.9.2 * slurm-plugins-23.02.5-150500.5.9.2 * libnss_slurm2-23.02.5-150500.5.9.2 * slurm-torque-23.02.5-150500.5.9.2 * slurm-sql-23.02.5-150500.5.9.2 * libnss_slurm2-debuginfo-23.02.5-150500.5.9.2 * slurm-23.02.5-150500.5.9.2 * slurm-sview-23.02.5-150500.5.9.2 * slurm-rest-23.02.5-150500.5.9.2 * slurm-cray-debuginfo-23.02.5-150500.5.9.2 * slurm-debugsource-23.02.5-150500.5.9.2 * slurm-debuginfo-23.02.5-150500.5.9.2 * SUSE Package Hub 15 15-SP5 (noarch) * slurm-webdoc-23.02.5-150500.5.9.2 * slurm-config-23.02.5-150500.5.9.2 * slurm-seff-23.02.5-150500.5.9.2 * slurm-doc-23.02.5-150500.5.9.2 * slurm-sjstat-23.02.5-150500.5.9.2 * slurm-openlava-23.02.5-150500.5.9.2 * slurm-config-man-23.02.5-150500.5.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215437

1 0

SUSE-RU-2023:4333-1: moderate: Recommended update for slurm_23_02
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

# Recommended update for slurm_23_02 Announcement ID: SUSE-RU-2023:4333-1 Rating: moderate References: * bsc#1215437 Affected Products: * HPC Module 15-SP4 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 An update that has one fix can now be installed. ## Description: This update for slurm_23_02 fixes the following issues: * Updated to version 23.02.5 with the following changes: * Bug Fixes: * Revert a change in 23.02 where `SLURM_NTASKS` was no longer set in the job's environment when `--ntasks-per-node` was requested. The method that is is being set, however, is different and should be more accurate in more situations. * Change pmi2 plugin to honor the `SrunPortRange` option. This matches the new behavior of the pmix plugin in 23.02.0. Note that neither of these plugins makes use of the `MpiParams=ports=` option, and previously were only limited by the systems ephemeral port range. * Fix regression in 23.02.2 that caused slurmctld -R to crash on startup if a node features plugin is configured. * Fix and prevent reoccurring reservations from overlapping. * `job_container/tmpfs` \- Avoid attempts to share BasePath between nodes. * With `CR_Cpu_Memory`, fix node selection for jobs that request gres and `--mem-per-cpu`. * Fix a regression from 22.05.7 in which some jobs were allocated too few nodes, thus overcommitting cpus to some tasks. * Fix a job being stuck in the completing state if the job ends while the primary controller is down or unresponsive and the backup controller has not yet taken over. * Fix `slurmctld` segfault when a node registers with a configured `CpuSpecList` while `slurmctld` configuration has the node without `CpuSpecList`. * Fix cloud nodes getting stuck in `POWERED_DOWN+NO_RESPOND` state after not registering by `ResumeTimeout`. * `slurmstepd` \- Avoid cleanup of `config.json-less` containers spooldir getting skipped. * Fix scontrol segfault when 'completing' command requested repeatedly in interactive mode. * Properly handle a race condition between `bind()` and `listen()` calls in the network stack when running with SrunPortRange set. * Federation - Fix revoked jobs being returned regardless of the `-a`/`--all` option for privileged users. * Federation - Fix canceling pending federated jobs from non-origin clusters which could leave federated jobs orphaned from the origin cluster. * Fix sinfo segfault when printing multiple clusters with `--noheader` option. * Federation - fix clusters not syncing if clusters are added to a federation before they have registered with the dbd. * `node_features/helpers` \- Fix node selection for jobs requesting changeable. features with the `|` operator, which could prevent jobs from running on some valid nodes. * `node_features/helpers` \- Fix inconsistent handling of `&` and `|`, where an AND'd feature was sometimes AND'd to all sets of features instead of just the current set. E.g. `foo|bar&baz` was interpreted as `{foo,baz}` or `{bar,baz}` instead of how it is documented: `{foo} or {bar,baz}`. * Fix job accounting so that when a job is requeued its allocated node count is cleared. After the requeue, sacct will correctly show that the job has 0 `AllocNodes` while it is pending or if it is canceled before restarting. * `sacct` \- `AllocCPUS` now correctly shows 0 if a job has not yet received an allocation or if the job was canceled before getting one. * Fix intel OneAPI autodetect: detect the `/dev/dri/renderD[0-9]+` GPUs, and do not detect `/dev/dri/card[0-9]+`. * Fix node selection for jobs that request `--gpus` and a number of tasks fewer than GPUs, which resulted in incorrectly rejecting these jobs. * Remove `MYSQL_OPT_RECONNECT` completely. * Fix cloud nodes in `POWERING_UP` state disappearing (getting set to `FUTURE`) when an `scontrol reconfigure` happens. * `openapi/dbv0.0.39` \- Avoid assert / segfault on missing coordinators list. * `slurmrestd` \- Correct memory leak while parsing OpenAPI specification templates with server overrides. * Fix overwriting user node reason with system message. * Prevent deadlock when `rpc_queue` is enabled. * `slurmrestd` \- Correct OpenAPI specification generation bug where fields with overlapping parent paths would not get generated. * Fix memory leak as a result of a partition info query. * Fix memory leak as a result of a job info query. * For step allocations, fix `--gres=none` sometimes not ignoring gres from the job. * Fix `--exclusive` jobs incorrectly gang-scheduling where they shouldn't. * Fix allocations with `CR_SOCKET`, gres not assigned to a specific socket, and block core distribion potentially allocating more sockets than required. * Revert a change in 23.02.3 where Slurm would kill a script's process group as soon as the script ended instead of waiting as long as any process in that process group held the stdout/stderr file descriptors open. That change broke some scripts that relied on the previous behavior. Setting time limits for scripts (such as `PrologEpilogTimeout`) is strongly encouraged to avoid Slurm waiting indefinitely for scripts to finish. * Fix `slurmdbd -R` not returning an error under certain conditions. * `slurmdbd` \- Avoid potential NULL pointer dereference in the mysql plugin. * Fix regression in 23.02.3 which broken X11 forwarding for hosts when MUNGE sends a localhost address in the encode host field. This is caused when the node hostname is mapped to 127.0.0.1 (or similar) in `/etc/hosts`. * `openapi/[db]v0.0.39` \- fix memory leak on parsing error. * `data_parser/v0.0.39` \- fix updating qos for associations. * `openapi/dbv0.0.39` \- fix updating values for associations with null users. * Fix minor memory leak with `--tres-per-task` and licenses. * Fix cyclic socket cpu distribution for tasks in a step where `--cpus-per-task` < usable threads per core. * `slurmrestd` \- For `GET /slurm/v0.0.39/node[s]`, change format of node's energy field `current_watts` to a dictionary to account for unset value instead of dumping 4294967294. * `slurmrestd` \- For `GET /slurm/v0.0.39/qos`, change format of QOS's field "priority" to a dictionary to account for unset value instead of dumping 4294967294. * slurmrestd - For `GET /slurm/v0.0.39/job[s]`, the 'return code' code field in `v0.0.39_job_exit`_code will be set to -127 instead of being left unset where job does not have a relevant return code. * Other Changes: * Remove --uid / --gid options from salloc and srun commands. These options did not work correctly since the CVE-2022-29500 fix in combination with some changes made in 23.02.0. * Add the `JobId` to `debug()` messages indicating when `cpus_per_task/mem_per_cpu` or `pn_min_cpus` are being automatically adjusted. * Change the log message warning for rate limited users from verbose to info. * `slurmstepd` \- Cleanup per task generated environment for containers in spooldir. * Format batch, extern, interactive, and pending step ids into strings that are human readable. * `slurmrestd` \- Reduce memory usage when printing out job CPU frequency. * `data_parser/v0.0.39` \- Add `required/memory_per_cpu` and `required/memory_per_node` to `sacct --json` and `sacct --yaml` and `GET /slurmdb/v0.0.39/jobs` from slurmrestd. * `gpu/oneapi` \- Store cores correctly so CPU affinity is tracked. * Allow `slurmdbd -R` to work if the root assoc id is not 1. * Limit periodic node registrations to 50 instead of the full `TreeWidth`. Since unresolvable `cloud/dynamic` nodes must disable fanout by setting `TreeWidth` to a large number, this would cause all nodes to register at once. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2023-4333=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4333=1 * HPC Module 15-SP4 zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2023-4333=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4333=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4333=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * slurm_23_02-hdf5-23.02.5-150300.7.11.2 * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-hdf5-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-testsuite-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * openSUSE Leap 15.3 (noarch) * slurm_23_02-config-man-23.02.5-150300.7.11.2 * slurm_23_02-sjstat-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-seff-23.02.5-150300.7.11.2 * slurm_23_02-openlava-23.02.5-150300.7.11.2 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * openSUSE Leap 15.4 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * HPC Module 15-SP4 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * HPC Module 15-SP4 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * slurm_23_02-torque-23.02.5-150300.7.11.2 * slurm_23_02-sql-23.02.5-150300.7.11.2 * slurm_23_02-lua-23.02.5-150300.7.11.2 * slurm_23_02-cray-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-23.02.5-150300.7.11.2 * slurm_23_02-rest-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-lua-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-rest-23.02.5-150300.7.11.2 * slurm_23_02-sview-23.02.5-150300.7.11.2 * libpmi0_23_02-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-slurmdbd-23.02.5-150300.7.11.2 * slurm_23_02-cray-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-debuginfo-23.02.5-150300.7.11.2 * perl-slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * libnss_slurm2_23_02-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugin-ext-sensors-rrd-23.02.5-150300.7.11.2 * slurm_23_02-debugsource-23.02.5-150300.7.11.2 * libslurm39-debuginfo-23.02.5-150300.7.11.2 * libpmi0_23_02-23.02.5-150300.7.11.2 * slurm_23_02-auth-none-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-sql-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-node-debuginfo-23.02.5-150300.7.11.2 * libslurm39-23.02.5-150300.7.11.2 * slurm_23_02-sview-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-munge-23.02.5-150300.7.11.2 * slurm_23_02-pam_slurm-23.02.5-150300.7.11.2 * slurm_23_02-torque-debuginfo-23.02.5-150300.7.11.2 * slurm_23_02-plugins-23.02.5-150300.7.11.2 * slurm_23_02-devel-23.02.5-150300.7.11.2 * slurm_23_02-23.02.5-150300.7.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * slurm_23_02-config-23.02.5-150300.7.11.2 * slurm_23_02-webdoc-23.02.5-150300.7.11.2 * slurm_23_02-doc-23.02.5-150300.7.11.2 * slurm_23_02-config-man-23.02.5-150300.7.11.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215437

1 0

openSUSE-RU-2023:0344-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0344-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yubioath-desktop fixes the following issues: Version 5.1.0 - Support and manage FIDO-enabled YubiKeys. - Toggle applications over USB and NFC. - Major UI improvements. Version 5.0.5 - Compatibility update for yubikey-manager 4.0 - Add additional product names. Version 5.0.4 - New app icons on all platforms - Adjust the behaviour of the search bar, do not search accounts without having focus - Bugfix: Fix keyboard shortcut to copy account code - Bugfix: Show firmware version for YubiKey NEO correctly - Windows: Show correct version number in .msi installers - macOS: Fix issue with window positioning - macOS: Fix occacional crashes on startup - Linux: Fix the app icon and desktop entry for the Snap package. Version 5.0.3 - macOS: Make the app available in the macOS App Store - Windows: Make the app available in the Microsoft Store (for Windows 10 20.04 and higher) - Linux: Make the app available in the Snap Store - Add support for YubiKey 5C NFC - Bugfix: Make sure the application is always visible on Windows Version 5.0.2 - Allow spaces in secret key when adding accounts - UI: Move favorite button to the credential card - UI: Improved scrolling behaviour Version 5.0.1 - New colors for the account icons. - Use Roboto font on all platforms. - Increase some text sizes for better readability. - Change icon for the Settings button and move it to the left. - SysTray: Open application on double-click. - Terminology: Use "Accounts" instead of "Credentials". - Bugfix: Clear old accounts correctly when switching between devices. - Add keyboard shortcut (Ctrl/Cmd + i) for info popup. Version 5.0.0 - New UI based on Material Design and Qt Quick Controls 2 - Add Dark Mode and Light Mode - Feature: Allow switching between connected YubiKeys - Feature: Select favorite credentials, available from the System Tray/Menu Bar - Show some information about the connected YubiKey, such as firmware version and serial number - Add experimental support for external smart card readers, enabling the use of a YubiKey over NFC - Add initial accessability support Version 4.3.6b - Fixes problem where YubiKey was not being detected on macOS. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-344=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): yubioath-desktop-5.1.0-bp155.3.3.1 References:

1 0

openSUSE-RU-2023:0343-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 02 Nov '23

02 Nov '23

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0343-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yubioath-desktop fixes the following issues: Version 5.1.0 - Support and manage FIDO-enabled YubiKeys. - Toggle applications over USB and NFC. - Major UI improvements. Version 5.0.5 - Compatibility update for yubikey-manager 4.0 - Add additional product names. Version 5.0.4 - New app icons on all platforms - Adjust the behaviour of the search bar, do not search accounts without having focus - Bugfix: Fix keyboard shortcut to copy account code - Bugfix: Show firmware version for YubiKey NEO correctly - Windows: Show correct version number in .msi installers - macOS: Fix issue with window positioning - macOS: Fix occacional crashes on startup - Linux: Fix the app icon and desktop entry for the Snap package. Version 5.0.3 - macOS: Make the app available in the macOS App Store - Windows: Make the app available in the Microsoft Store (for Windows 10 20.04 and higher) - Linux: Make the app available in the Snap Store - Add support for YubiKey 5C NFC - Bugfix: Make sure the application is always visible on Windows Version 5.0.2 - Allow spaces in secret key when adding accounts - UI: Move favorite button to the credential card - UI: Improved scrolling behaviour Version 5.0.1 - New colors for the account icons. - Use Roboto font on all platforms. - Increase some text sizes for better readability. - Change icon for the Settings button and move it to the left. - SysTray: Open application on double-click. - Terminology: Use "Accounts" instead of "Credentials". - Bugfix: Clear old accounts correctly when switching between devices. - Add keyboard shortcut (Ctrl/Cmd + i) for info popup. Version 5.0.0 - New UI based on Material Design and Qt Quick Controls 2 - Add Dark Mode and Light Mode - Feature: Allow switching between connected YubiKeys - Feature: Select favorite credentials, available from the System Tray/Menu Bar - Show some information about the connected YubiKey, such as firmware version and serial number - Add experimental support for external smart card readers, enabling the use of a YubiKey over NFC - Add initial accessability support Version 4.3.6b - Fixes problem where YubiKey was not being detected on macOS. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-343=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): yubioath-desktop-5.1.0-bp154.2.3.1 References:

1 0

SUSE-SU-2023:4329-1: important: Security update for slurm
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for slurm Announcement ID: SUSE-SU-2023:4329-1 Rating: important References: * bsc#1208810 * bsc#1216207 Cross-References: * CVE-2023-41914 CVSS scores: * CVE-2023-41914 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for slurm fixes the following issues: * CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4329=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4329=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4329=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-debugsource-20.11.9-150200.6.13.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-rest-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-seff-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.13.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-openlava-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * perl-slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sjstat-20.11.9-150200.6.13.1 * slurm_20_11-cray-20.11.9-150200.6.13.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.13.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-sql-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-debugsource-20.11.9-150200.6.13.1 * slurm_20_11-rest-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-rest-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-torque-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-seff-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sview-debuginfo-20.11.9-150200.6.13.1 * libpmi0_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-lua-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-node-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-cray-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-openlava-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * perl-slurm_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.13.1 * slurm_20_11-sjstat-20.11.9-150200.6.13.1 * slurm_20_11-cray-20.11.9-150200.6.13.1 * slurm_20_11-munge-debuginfo-20.11.9-150200.6.13.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libslurm36-20.11.9-150200.6.13.1 * slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-plugins-20.11.9-150200.6.13.1 * libpmi0_20_11-20.11.9-150200.6.13.1 * slurm_20_11-slurmdbd-20.11.9-150200.6.13.1 * slurm_20_11-torque-20.11.9-150200.6.13.1 * slurm_20_11-devel-20.11.9-150200.6.13.1 * slurm_20_11-webdoc-20.11.9-150200.6.13.1 * slurm_20_11-lua-20.11.9-150200.6.13.1 * slurm_20_11-pam_slurm-20.11.9-150200.6.13.1 * libnss_slurm2_20_11-20.11.9-150200.6.13.1 * slurm_20_11-sview-20.11.9-150200.6.13.1 * slurm_20_11-munge-20.11.9-150200.6.13.1 * slurm_20_11-config-20.11.9-150200.6.13.1 * slurm_20_11-config-man-20.11.9-150200.6.13.1 * slurm_20_11-node-20.11.9-150200.6.13.1 * perl-slurm_20_11-20.11.9-150200.6.13.1 * slurm_20_11-sql-20.11.9-150200.6.13.1 * slurm_20_11-auth-none-20.11.9-150200.6.13.1 * slurm_20_11-doc-20.11.9-150200.6.13.1 * libslurm36-debuginfo-20.11.9-150200.6.13.1 ## References: * https://www.suse.com/security/cve/CVE-2023-41914.html * https://bugzilla.suse.com/show_bug.cgi?id=1208810 * https://bugzilla.suse.com/show_bug.cgi?id=1216207

1 0

SUSE-SU-2023:4330-1: important: Security update for libsndfile
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for libsndfile Announcement ID: SUSE-SU-2023:4330-1 Rating: important References: * bsc#1213451 Cross-References: * CVE-2022-33065 CVSS scores: * CVE-2022-33065 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-33065 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libsndfile fixes the following issues: * CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file (bsc#1213451). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4330=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4330=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4330=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4330=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4330=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4330=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4330=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4330=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4330=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4330=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4330=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4330=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4330=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4330=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4330=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4330=1 ## Package List: * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Proxy 4.2 (x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE CaaS Platform 4.0 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libsndfile-progs-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile-progs-debuginfo-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-progs-debugsource-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * openSUSE Leap 15.4 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsndfile-progs-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile-progs-debuginfo-1.0.28-150000.5.20.1 * libsndfile1-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-progs-debugsource-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * openSUSE Leap 15.5 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Package Hub 15 15-SP4 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Package Hub 15 15-SP5 (x86_64) * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libsndfile1-32bit-1.0.28-150000.5.20.1 * libsndfile1-32bit-debuginfo-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libsndfile1-1.0.28-150000.5.20.1 * libsndfile-debugsource-1.0.28-150000.5.20.1 * libsndfile1-debuginfo-1.0.28-150000.5.20.1 * libsndfile-devel-1.0.28-150000.5.20.1 ## References: * https://www.suse.com/security/cve/CVE-2022-33065.html * https://bugzilla.suse.com/show_bug.cgi?id=1213451

1 0

SUSE-SU-2023:4328-1: important: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
by maintenance＠opensuse.org 01 Nov '23

01 Nov '23

# Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) Announcement ID: SUSE-SU-2023:4328-1 Rating: important References: * bsc#1215440 Cross-References: * CVE-2023-4623 CVSS scores: * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_88 fixes one issue. The following security issue was fixed: * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2023-4327=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4328=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2023-4328=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-4327=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-2-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-2-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5_Update_5-debugsource-2-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-2-150500.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_18-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4623.html * https://bugzilla.suse.com/show_bug.cgi?id=1215440

1 0