Your message dated Sun, 17 Feb 2019 13:05:28 +0000
with message-id <e1gvm8o-000fmu...@fasolo.debian.org>
and subject line Bug#920997: fixed in slurm-llnl 18.08.5.2-1
has caused the Debian Bug report #920997,
regarding slurm-llnl: CVE-2019-6438
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
920997: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920997
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: slurm-llnl
Version: 18.08.3-1
Severity: grave
Tags: security upstream
Control: found -1 16.05.9-1+deb9u2
Control: found -1 16.05.9-1
Hi,
The following vulnerability was published for slurm-llnl.
CVE-2019-6438[0]:
| SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit
| systems.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2019-6438
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6438
[1] https://lists.schedmd.com/pipermail/slurm-announce/2019/000018.html
[2] https://lists.schedmd.com/pipermail/slurm-announce/2019/000019.html
[3] https://www.schedmd.com/news.php?id=213
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: slurm-llnl
Source-Version: 18.08.5.2-1
We believe that the bug you reported is fixed in the latest version of
slurm-llnl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 920...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Gennaro Oliva <oliv...@na.icar.cnr.it> (supplier of updated slurm-llnl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 17 Feb 2019 13:32:52 +0100
Source: slurm-llnl
Binary: libpam-slurm libpmi0 libpmi0-dbgsym libpmi0-dev libpmi2-0
libpmi2-0-dbgsym libpmi2-0-dev libslurm-dev libslurm-perl libslurm33
libslurm33-dbgsym libslurmdb-dev libslurmdb-perl libslurmdb33
libslurmdb33-dbgsym slurm-client slurm-client-dbgsym slurm-client-emulator
slurm-wlm slurm-wlm-basic-plugins slurm-wlm-basic-plugins-dbgsym
slurm-wlm-basic-plugins-dev slurm-wlm-doc slurm-wlm-emulator slurm-wlm-torque
slurmctld slurmctld-dbgsym slurmd slurmd-dbgsym slurmdbd slurmdbd-dbgsym sview
Architecture: source amd64 all
Version: 18.08.5.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian HPC Team <debian-...@lists.debian.org>
Changed-By: Gennaro Oliva <oliv...@na.icar.cnr.it>
Description:
libpam-slurm - PAM module to authenticate using the SLURM resource manager
libpmi0 - SLURM PMI library implementation
libpmi0-dev - SLURM PMI library implementation development files
libpmi2-0 - SLURM PMI2 library implementation
libpmi2-0-dev - SLURM PMI2 library implementation development files
libslurm-dev - SLURM development files
libslurm-perl - Perl API for SLURM
libslurm33 - Runtime library files for SLURM
libslurmdb-dev - SLURM DataBase Daemon development files
libslurmdb-perl - Perl API for the SLURM database
libslurmdb33 - Runtime library files for the SLURM DataBase Daemon
slurm-client - SLURM client side commands
slurm-client-emulator - SLURM client side commands for the emulator
slurm-wlm - Simple Linux Utility for Resource Management
slurm-wlm-basic-plugins - SLURM basic plugins
slurm-wlm-basic-plugins-dev - SLURM basic plugins development files
slurm-wlm-doc - SLURM documentation
slurm-wlm-emulator - SLURM emulator
slurm-wlm-torque - Torque compatibility wrappers for SLURM
slurmctld - SLURM central management daemon
slurmd - SLURM compute node daemon
slurmdbd - Secure enterprise-wide interface to a database for SLURM
sview - GUI to view and modify SLURM state
Closes: 850891 851103 885759 920997
Changes:
slurm-llnl (18.08.5.2-1) unstable; urgency=medium
.
* New upstream release fixes CVE-2019-6438 (Closes: #920997)
* debian/patches/man-pages-typos: removed, applied upstream
* Add Build-Depends-Package field to symbol files
* Handling slurm user inside the plugin package as suggested by
Karl Kornel (Closes: #850891)
* Allow using a slurm user with a different UID if created before
installation (Closes: #851103)
* Move pid files under /run (Closes: #885759)
* Change static libs strip options for standard version 4.3.0
* Fix a typo in the perl code
* Remove rc4 symlink creation in slurmdbd.postinst
* Update service files to sync with upstream
* Update init scripts with the new pid files
* Remove init scripts symlinks for old SlurmdSpoolDir and StateSaveLocation
* Sync configurators with upstream
* Bump debhelper compat level to 11
* Remove --without-blcr configure option not needed anymore
* Add libfreeipmi-dev build dependency to enable freeipmi support
* Remove old d/NEWS file
Checksums-Sha1:
9206b4c541da51ce6b1667e53230778b76f69f8e 3721 slurm-llnl_18.08.5.2-1.dsc
322e55d4948692826373f5bbca2f5dcc70c60180 8480348
slurm-llnl_18.08.5.2.orig.tar.gz
e81f839f02ebe2a06c3e25b0f449fdcb1e9c6c78 127952
slurm-llnl_18.08.5.2-1.debian.tar.xz
b4269cc633d946c1beefe5f383706e7a862ab952 28560
libpam-slurm_18.08.5.2-1_amd64.deb
790cfabcf9d41bc16a8b4b16adad8a5530f7c90f 26516
libpmi0-dbgsym_18.08.5.2-1_amd64.deb
8b694d4312845a301fc0ee25348642428a915737 36508
libpmi0-dev_18.08.5.2-1_amd64.deb
8646e132343ce6a331927b46b85554331d6427ab 32644 libpmi0_18.08.5.2-1_amd64.deb
7e1e8e937a1634fb7a39574f916139f8b146e41c 39148
libpmi2-0-dbgsym_18.08.5.2-1_amd64.deb
488a4ac9d1b9f3fda75ef0d6fd1f569e65195b98 42172
libpmi2-0-dev_18.08.5.2-1_amd64.deb
baf8ae0d75700d9348c13a85461c666cf01dc16f 34916 libpmi2-0_18.08.5.2-1_amd64.deb
28678ded386fb66fbbcb38c979e105aef7562365 799812
libslurm-dev_18.08.5.2-1_amd64.deb
e2d6289001de95477d1180a58930f7ebe2916734 165572
libslurm-perl_18.08.5.2-1_amd64.deb
87306e19d43f5b2b19dadce0eb6ad40681b970fa 2295112
libslurm33-dbgsym_18.08.5.2-1_amd64.deb
80a63b17fc5b94ddb6dec9ef056e5884a8af2cb3 630960
libslurm33_18.08.5.2-1_amd64.deb
38b4ea8dfbdbeca81253bad9daaaeb9081057de8 723536
libslurmdb-dev_18.08.5.2-1_amd64.deb
d2ca487482090fc7e921fbf04f4ffeae4edd1f48 48548
libslurmdb-perl_18.08.5.2-1_amd64.deb
da2987534b831ce0c5dfa6fe983328753bd8270b 2357416
libslurmdb33-dbgsym_18.08.5.2-1_amd64.deb
cf1b1f749969651e83421f0134cf814637fec2d4 613212
libslurmdb33_18.08.5.2-1_amd64.deb
a0158313300a16aab5eb5057c6870441f27442bf 1885316
slurm-client-dbgsym_18.08.5.2-1_amd64.deb
ec7647ef02cee17b1d70ce93a90d2795478cfb17 410752
slurm-client-emulator_18.08.5.2-1_amd64.deb
8df83f6a525876bebb1ac942e5f87ded5698d982 892148
slurm-client_18.08.5.2-1_amd64.deb
376de55e4c4377b8cc97b1ddc1449854b88b2071 21633
slurm-llnl_18.08.5.2-1_amd64.buildinfo
5f302b0dca17d091198a24b18a3bbd16987576fd 6167688
slurm-wlm-basic-plugins-dbgsym_18.08.5.2-1_amd64.deb
9877d5bddc0fd2de29f6435b1dce44cc03abc78a 1259468
slurm-wlm-basic-plugins-dev_18.08.5.2-1_amd64.deb
7c164ac8349e056aa5c438488a6dfa9880e57fed 1240164
slurm-wlm-basic-plugins_18.08.5.2-1_amd64.deb
fd26e296766abb390fdc46bdb0cee7e09607a7ae 1324868
slurm-wlm-doc_18.08.5.2-1_all.deb
6e4bc89939d526975dd159db02dfd9639497b87c 558408
slurm-wlm-emulator_18.08.5.2-1_amd64.deb
03f2cbef2a387fda419f9275f84f04747a383028 63204
slurm-wlm-torque_18.08.5.2-1_all.deb
50431eed3ee191e5eb37e4454f3e4114e2571d6b 22644 slurm-wlm_18.08.5.2-1_amd64.deb
3a1010d569b80693c722044d745e981d84e35070 1291804
slurmctld-dbgsym_18.08.5.2-1_amd64.deb
e41819c6dce1090e13148c6b697c37909dee5e31 619456 slurmctld_18.08.5.2-1_amd64.deb
98f056b0e8eea42d54420853c48be2d96ed2d23c 699420
slurmd-dbgsym_18.08.5.2-1_amd64.deb
2f0bb297fc2404fa5bea74652f1c5e1db917bb71 372696 slurmd_18.08.5.2-1_amd64.deb
d023ec22d28b6e2ccd1a8778f9c623bdf80f36e2 136136
slurmdbd-dbgsym_18.08.5.2-1_amd64.deb
ff74a28eca142c5a0509c424adff6ef96fe16b09 68900 slurmdbd_18.08.5.2-1_amd64.deb
326cca85cc9d1a434e20e83bf4b82b7b2439822b 132704 sview_18.08.5.2-1_amd64.deb
Checksums-Sha256:
03383eade73eacd4cfd19276c9fa4e4809a6c30ed15848c815cf4fa0be5318b3 3721
slurm-llnl_18.08.5.2-1.dsc
1f76767003708a83d469f083987c7cf7cf806a4125931758659a527bed7fc15b 8480348
slurm-llnl_18.08.5.2.orig.tar.gz
bf2509def957b75270e7a1c5c1674e77af257cacfc1dbfeb372055d1ebe04dc0 127952
slurm-llnl_18.08.5.2-1.debian.tar.xz
13d13d0bb56126278c909e1e9372d932a3e16122c5bbad090667c92904740563 28560
libpam-slurm_18.08.5.2-1_amd64.deb
669e32d00ca2d89ceebf367b3c9e558e0e5314bb504ba03679676e40800ae74f 26516
libpmi0-dbgsym_18.08.5.2-1_amd64.deb
b944227b48b12506ed2298314c34fde903cc0fe7c61f493261cbb1dd1365d0a9 36508
libpmi0-dev_18.08.5.2-1_amd64.deb
7580e9ad9618d21cbd25d36c0e6503bb56dcfdc8ca07a74f292f14c29262c200 32644
libpmi0_18.08.5.2-1_amd64.deb
a877063635ca0c6492ed220a2d575332157ecd9490ba9926d2056ae1b5177e29 39148
libpmi2-0-dbgsym_18.08.5.2-1_amd64.deb
7a031ff71c5cd27428acfd86bbe8d3447bd3b9649c70876b3f4bf5ab2d5b8aa7 42172
libpmi2-0-dev_18.08.5.2-1_amd64.deb
c8dc7a60416ffbbdb1069c2feaea611cd6213582bfa2cb7edd7d392cbd2ef98d 34916
libpmi2-0_18.08.5.2-1_amd64.deb
81670390a10fe876ab7cd8dc4f008cb591d6c80becc8b1a419ad415820314e5a 799812
libslurm-dev_18.08.5.2-1_amd64.deb
604686cc7c67b0e656418b3e5cc9532f8be22900f01e5735be75051c06773535 165572
libslurm-perl_18.08.5.2-1_amd64.deb
2215013f7a0d039b709772d8b3dd8dcef8f8feb95061eaa6b7d047fe25958d60 2295112
libslurm33-dbgsym_18.08.5.2-1_amd64.deb
6dbb5fba3bb1089097e289a1dcd38a098b99387db9afa4de6d031a93e4e43aa6 630960
libslurm33_18.08.5.2-1_amd64.deb
29a1a64e4b0fa3f9af7309f0fd740d4b4eb6e6bf40b140832cfb603c5bdd22da 723536
libslurmdb-dev_18.08.5.2-1_amd64.deb
a71e18078d73946da67e0608f3e750cc272d94fe30630387a1675c112f013879 48548
libslurmdb-perl_18.08.5.2-1_amd64.deb
66ebc606ae48b2aaba0aa6eb1025ddd578e55619cee99cd308dfef3d4d681297 2357416
libslurmdb33-dbgsym_18.08.5.2-1_amd64.deb
c4b17e6d90617a69970b456519704bf212ab9bf3273b0de6954b1bfc889366bf 613212
libslurmdb33_18.08.5.2-1_amd64.deb
419e0a023f469cfd1f6bd2cae5d3988d71f66de84ae2183bb449889236434ad0 1885316
slurm-client-dbgsym_18.08.5.2-1_amd64.deb
3a110ee949f682b5b70a16460a963ae43953e0c5fe597c1664316a30259c9cb6 410752
slurm-client-emulator_18.08.5.2-1_amd64.deb
7578eebde8c3c1e9f269cfef6bc9a94dac927b3d0a9d21ed700f17dbeae00d6b 892148
slurm-client_18.08.5.2-1_amd64.deb
6d90691a9a47390dd6acda3c55cace125ce726f660adabdc48d0ac3c6e99b4d8 21633
slurm-llnl_18.08.5.2-1_amd64.buildinfo
78d395147536f5802bdf02b7acc01fd622f52b31d8cdf1f6ceaf268545a6d97f 6167688
slurm-wlm-basic-plugins-dbgsym_18.08.5.2-1_amd64.deb
4aedd5eb75cb526d2bcc556c1d226893c85cdf4b706f937923b37cc3123b746f 1259468
slurm-wlm-basic-plugins-dev_18.08.5.2-1_amd64.deb
2709ddd3c2d3bb9d936eab0bd8ec68c5c66290aad3a0a612cd40aea24310fc35 1240164
slurm-wlm-basic-plugins_18.08.5.2-1_amd64.deb
8393175f7106b38df31a66ca1f3c58dcd3769cd88d948a445c7a68e971cbb3ce 1324868
slurm-wlm-doc_18.08.5.2-1_all.deb
9022f038647d65e553922cd551d8fdcce0c6bde09c55269e3363f1eaef1eddaf 558408
slurm-wlm-emulator_18.08.5.2-1_amd64.deb
fcaaf5b37babe804d946b7d33d8db2560536a91b83961ab0ecd264f6ae4c7eaa 63204
slurm-wlm-torque_18.08.5.2-1_all.deb
9f7a7f914e541d408ef5a6f41ce0906ff32eb986d27b2e63a3ba330cfae69558 22644
slurm-wlm_18.08.5.2-1_amd64.deb
7ae7f8480937d609908f4d5ea32ed8493c8139629c9def9508d7020bca5b69f5 1291804
slurmctld-dbgsym_18.08.5.2-1_amd64.deb
03f55988de71578ac15b55f2353571014175d24226120c5c66b9cd32c04a29bb 619456
slurmctld_18.08.5.2-1_amd64.deb
d36d12d185ebc6b673378270e3192805f67b86efa809cc0cb204a0188bc6be34 699420
slurmd-dbgsym_18.08.5.2-1_amd64.deb
767209c69dbba5948a29489d2a9793e477dc840f7d74bb52784f4aa4f4b58876 372696
slurmd_18.08.5.2-1_amd64.deb
6a7e73c7fe731404928eba4bf23e8434b12b2c295a4ffd424c887ab8b50741ec 136136
slurmdbd-dbgsym_18.08.5.2-1_amd64.deb
4e1da5ed1efb064d7faa48ac179667bd344631928befd7746f69f96731e0b400 68900
slurmdbd_18.08.5.2-1_amd64.deb
49ad807d0f76d0502fa597b6dabc6231e3b2cd3938d7423e6dbe3981de01528f 132704
sview_18.08.5.2-1_amd64.deb
Files:
666735d232b02e7bf746e48ce115cdfa 3721 admin optional slurm-llnl_18.08.5.2-1.dsc
dccff9020a65f87f906ea40f552cf534 8480348 admin optional
slurm-llnl_18.08.5.2.orig.tar.gz
0b6818feb0d97a81b90a8069cd583153 127952 admin optional
slurm-llnl_18.08.5.2-1.debian.tar.xz
1bcb149d0823baacfb8228c7f7fc8479 28560 admin optional
libpam-slurm_18.08.5.2-1_amd64.deb
85c5a164fc6fd5f6a053204aadb65059 26516 debug optional
libpmi0-dbgsym_18.08.5.2-1_amd64.deb
3566f0c3aaa08b9b7ffb8211e7939706 36508 libdevel optional
libpmi0-dev_18.08.5.2-1_amd64.deb
9777ef4b81faa50c1c3ad8e0cb97a59e 32644 libs optional
libpmi0_18.08.5.2-1_amd64.deb
b3ca6b62488dcb4f935d720713659b72 39148 debug optional
libpmi2-0-dbgsym_18.08.5.2-1_amd64.deb
878f1dfd337e8e169f4aad5d1d2c1a5e 42172 libdevel optional
libpmi2-0-dev_18.08.5.2-1_amd64.deb
46b3f2a59fbb387d19ebba73f7c77975 34916 libs optional
libpmi2-0_18.08.5.2-1_amd64.deb
c91ae0eb5b71612ada0006d3b2ddd194 799812 libdevel optional
libslurm-dev_18.08.5.2-1_amd64.deb
6c576c104f9fecddbc1f8bec2fd7d11b 165572 perl optional
libslurm-perl_18.08.5.2-1_amd64.deb
bdd505c36ff213967af9785f71f3572d 2295112 debug optional
libslurm33-dbgsym_18.08.5.2-1_amd64.deb
6fe67a8efb89caf6a172f46b1d6c0aa7 630960 libs optional
libslurm33_18.08.5.2-1_amd64.deb
2e3e9471ed3ec4e3e855cf1fb09e9ab5 723536 libdevel optional
libslurmdb-dev_18.08.5.2-1_amd64.deb
2adf96a87ef19cefe3184f054610b860 48548 perl optional
libslurmdb-perl_18.08.5.2-1_amd64.deb
54d808f7af7d8f9965707bbe7a9ac78c 2357416 debug optional
libslurmdb33-dbgsym_18.08.5.2-1_amd64.deb
5f153bfa242877b73dd9d17821a17d05 613212 libs optional
libslurmdb33_18.08.5.2-1_amd64.deb
63ddb665ef7c03f83b319061933d36c2 1885316 debug optional
slurm-client-dbgsym_18.08.5.2-1_amd64.deb
b621d17c87f9cd61baf9cae6c9e12003 410752 admin optional
slurm-client-emulator_18.08.5.2-1_amd64.deb
96fa389215cbe385d93183bb6b6b2a3a 892148 admin optional
slurm-client_18.08.5.2-1_amd64.deb
34f3487b62d9a9370a7e76708dff273b 21633 admin optional
slurm-llnl_18.08.5.2-1_amd64.buildinfo
9360828df867fc756801b3d53b7d1151 6167688 debug optional
slurm-wlm-basic-plugins-dbgsym_18.08.5.2-1_amd64.deb
cb9fa0fd5ef27c9ce64401b1c64bc202 1259468 devel optional
slurm-wlm-basic-plugins-dev_18.08.5.2-1_amd64.deb
3370eeff657872b7634c430e4f91c8a8 1240164 admin optional
slurm-wlm-basic-plugins_18.08.5.2-1_amd64.deb
7996bcd6964fa71bf8f05e6bc860d90c 1324868 doc optional
slurm-wlm-doc_18.08.5.2-1_all.deb
2e6b81f6d3cceb79edbbf7c1ec4c753a 558408 admin optional
slurm-wlm-emulator_18.08.5.2-1_amd64.deb
698ed89c82ba7b78983b403602587bfa 63204 admin optional
slurm-wlm-torque_18.08.5.2-1_all.deb
55469ddd3573c2d06ab652d6aa4a4341 22644 admin optional
slurm-wlm_18.08.5.2-1_amd64.deb
3f5937412127970ff3c2214122c84857 1291804 debug optional
slurmctld-dbgsym_18.08.5.2-1_amd64.deb
41ce7531bfb717030f111180f4f046dd 619456 admin optional
slurmctld_18.08.5.2-1_amd64.deb
66bfe67f63e3332f4a32c3688a1c17ba 699420 debug optional
slurmd-dbgsym_18.08.5.2-1_amd64.deb
a9b774ae6649db1bdcca522a90fde36e 372696 admin optional
slurmd_18.08.5.2-1_amd64.deb
d566b165cc70e8295b22185dab1ec3c4 136136 debug optional
slurmdbd-dbgsym_18.08.5.2-1_amd64.deb
2cbb4b6df585d086384bf392a1d1e45c 68900 admin optional
slurmdbd_18.08.5.2-1_amd64.deb
da358cf4f2c870646c56523e31fe9ec3 132704 admin optional
sview_18.08.5.2-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQJLBAEBCgA1FiEE6zNF9WRBuLgad5h2ffpBrZYZhdcFAlxpWRMXHG9saXZhLmdA
bmEuaWNhci5jbnIuaXQACgkQffpBrZYZhdchzBAAirS80Id34wPaxpHZwRcZNAaK
NIZEtDN/BVguhVNGvOlunoienE0nZNciPvUDPpTJMDuMv5O47K6HYtrXMVj1kR+/
85liGinbo/8VPjC/FR6qEvVKHSyxwxfu9sBG+lwFq17D1DB0K5dK2KATiQ1xZyRK
oC0yXkg+FQRuq6omkuJd8dPUKY6oR+Ux+Sbm8GS24KSo9frkd2X/hTFPJC8oS7Zt
OythMJVaoOGb6IDlwfykQhKyJYHLbLJDNO7WpW8xAhFPxiH/cEFiNN57KlHWAsE2
ljwlYvPbe3V3NrR9wkPYDMp2fuHzRObwAJjbwYk0JwzBQHMTaxLoFulakIe4EgaV
gfAMjFvJP6XsDfuUrTE8na9qtrbrF7odigRCML/VlkyrEFzJFpJXdM3fptk6cF0w
6dHvG6A6yEkuTQlPYDOn2/W2o2D074KzUWlw38qThvJ7ZzNnSslhp4fqrY01wXLW
qaj3owk8ivl6MbhtrtSfNXI9VNq1SVWk6GGj/XdiO1L/9ZZOInpML9D1QbfQS2KP
VoYREqOUy/0kqqweS0/YnVbcn3PgrTK2CImZCMIkMDOhK30u1NuCLJhFB5PLtqTq
tHNfCy6i3Pfa/6SNvHRFOINYOT597lACyeNKhAB8p2xALadDsd3CYWyHD6Q0cDNI
/9R7um9XSFXx/wa0LpQ=
=hUD4
-----END PGP SIGNATURE-----
--- End Message ---