[QSA-0917193] slurmdbd vulnerability
Qlustar Security Advisory 0917193
Sept 17th, 2019
Summary:
slurmdbd is vulnerable to SQL injection..
Package(s) : slurmdbd Qlustar releases : 11.0 Affected versions: All versions prior to this update Vulnerability : data integrity Problem type : network Qlustar-specific : no CVE Id(s) : CVE-2019-12838
Relevant to Qlustar 11.0
slurmdbd vulnerability
This update fixes a SQL injection in slurmdbd.
Update instructions:
The problem can be corrected by updating your system to the following Qlustar package versions (follow the Qlustar Update Instructions):
slurmdbd 18.08.8-ql.1+11-bionic
Note that the new package needs to be installed only on the head-node(s). After installing the new package, restart slurmdbd as follows:
$ service slurmdbd restart