Уведомление безопасности DSA-4254-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Debian

libpam-slurm (any) libpmi0 (any) libpmi0-dbg (any) libpmi0-dev (any) libpmi2-0 (any) libpmi2-0-dbg (any) libpmi2-0-dev (any) libslurm30 (any) libslurm30-dbg (any) libslurmdb30 (any) libslurmdb30-dbg (any) libslurmdb-dev (any) libslurmdb-perl (any) libslurm-dev (any) libslurm-perl (any) slurm-client (any) slurm-client-dbg (any) slurm-client-emulator (any) slurmctld (any) slurmctld-dbg (any) slurmd (any) slurmdbd (any) slurmdbd-dbg (any) slurmd-dbg (any) slurm-llnl (any) slurm-llnl-slurmdbd (any) slurm-wlm (any) slurm-wlm-basic-plugins (any) slurm-wlm-basic-plugins-dbg (any) slurm-wlm-basic-plugins-dev (any) slurm-wlm-doc (any) slurm-wlm-emulator (any) slurm-wlm-torque (any) sview (any)

Уведомление безопасности об уязвимостях libslurmdb30, libpmi0-dev, slurmdbd-dbg, slurmctld, slurm-wlm-basic-plugins-dev, libpmi2-0-dbg, libslurmdb-perl, libslurmdb30-dbg, libpmi0, slurm-wlm, libslurm30-dbg, libslurm-dev, slurm-client, libpam-slurm, slurmd-dbg, slurmd, slurm-llnl-slurmdbd, slurm-client-emulator, slurm-wlm-emulator, slurm-client-dbg, libpmi2-0, slurmdbd, slurm-wlm-doc, slurm-llnl, libpmi0-dbg, libslurm30, slurm-wlm-torque, libpmi2-0-dev, libslurm-perl, libslurmdb-dev, sview, slurm-wlm-basic-plugins-dbg, slurm-wlm-basic-plugins, slurmctld-dbg

Проблема может быть решена обновлением операционной системыдо следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 9:
noarch:
libpam-slurm - 16.05.9-1+deb9u2
libpmi0 - 16.05.9-1+deb9u2
libpmi0-dbg - 16.05.9-1+deb9u2
libpmi0-dev - 16.05.9-1+deb9u2
libpmi2-0 - 16.05.9-1+deb9u2
libpmi2-0-dbg - 16.05.9-1+deb9u2
libpmi2-0-dev - 16.05.9-1+deb9u2
libslurm-dev - 16.05.9-1+deb9u2
libslurm-perl - 16.05.9-1+deb9u2
libslurm30 - 16.05.9-1+deb9u2
libslurm30-dbg - 16.05.9-1+deb9u2
libslurmdb-dev - 16.05.9-1+deb9u2
libslurmdb-perl - 16.05.9-1+deb9u2
libslurmdb30 - 16.05.9-1+deb9u2
libslurmdb30-dbg - 16.05.9-1+deb9u2
slurm-client - 16.05.9-1+deb9u2
slurm-client-dbg - 16.05.9-1+deb9u2
slurm-client-emulator - 16.05.9-1+deb9u2
slurm-llnl - 16.05.9-1+deb9u2
slurm-llnl-slurmdbd - 16.05.9-1+deb9u2
slurm-wlm - 16.05.9-1+deb9u2
slurm-wlm-basic-plugins - 16.05.9-1+deb9u2
slurm-wlm-basic-plugins-dbg - 16.05.9-1+deb9u2
slurm-wlm-basic-plugins-dev - 16.05.9-1+deb9u2
slurm-wlm-doc - 16.05.9-1+deb9u2
slurm-wlm-emulator - 16.05.9-1+deb9u2
slurm-wlm-torque - 16.05.9-1+deb9u2
slurmctld - 16.05.9-1+deb9u2
slurmctld-dbg - 16.05.9-1+deb9u2
slurmd - 16.05.9-1+deb9u2
slurmd-dbg - 16.05.9-1+deb9u2
slurmdbd - 16.05.9-1+deb9u2
slurmdbd-dbg - 16.05.9-1+deb9u2
sview - 16.05.9-1+deb9u2

http://www.debian.org/security/dsa-4254/

Источник: CVE
Наименование: CVE-2018-7033
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7033

Источник: CVE
Наименование: CVE-2018-10995
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10995