[Bugtraq] [SECURITY] [DSA 6491-1] slurm-wlm security update
Aron Xu · · Bugtraq
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 security@debian.org https://www.debian.org/security/ Aron Xu September 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : slurm-wlm CVE ID : CVE-2026-65107 CVE-2026-65108 CVE-2026-65109 CVE-2026-65138 CVE-2026-65139 CVE-2026-65140 CVE-2026-65165 Debian Bug : 1146563 Several vulnerabilities were discovered in the Slurm Workload Manager, a cluster resource management and job scheduling system, which may result in privilege escalation, SQL injection in the accounting database, deletion of files outside the container spool directory, bypass of credential verification for shared objects transferred with sbcast, or denial of service. For the stable distribution (trixie), these problems have been fixed in version 24.11.5-4+deb13u1. We recommend that you upgrade your slurm-wlm packages. For the detailed security status of slurm-wlm please refer to its security tracker page at: https://security-tracker.debian.org/tracker/slurm-wlm Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmqgz9EACgkQ+GQ1dHE8 m67dxwf+IPgq5EL+BekNMrDNvX79m1rhvmSu5FOwVTUmhZJ7iCqgtxtaGQo1Wn7V w991Bj442i6Az4g4wYXyYRkoJxG9ez7N9d+m+039R/SdLy5gHz4B/pEtPohAIJ+i APBSMXkQihpdp2dzBq1vJLe3aBBDGiF6XMcMxiimXjPr+90WsBSp+egQv/xbTIBC LexqhYs4v1N0bVuj+PzPN4YcFc9Zpm08aZ0Da5Fb0lwaARqGNUHVE/MbqFpxQNvB ZHIURaPbWCoJwUOgVDbHAe3cdoDtl7hBe4+8fDLoHqiVn4qXx8oxucGZYTM4EqCI axKOO4oPO4+fZL7P5ET3FrZgyirXSA== =BpL9 -----END PGP SIGNATURE-----