[slurm-users] Slurm versions 23.02.6 and 22.05.10 are now available (CVE-2023-41914)

[Ryan Novosielski]

If you look at the downloads page, this has happened before:

https://www.schedmd.com/archives.php

This should probably be updated as well, to indicate the new floor after this CVE.

But the point is, basically, you’re going to hit this if you don’t upgrade at least every ~18 months.

--
#BlackLivesMatter
____
|| \\UTGERS,     |---------------------------*O*---------------------------
||_// the State  |         Ryan Novosielski - novosirj at rutgers.edu
|| \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus
||  \\    of NJ  | Office of Advanced Research Computing - MSB A555B, Newark
     `'

On Oct 13, 2023, at 06:22, Taras Shapovalov <tshapovalov at nvidia.com> wrote:

Oh, does this mean that no one should use Slurm versions <= 21.08 any more?

Best regards,

Taras


________________________________
From: slurm-users on behalf of Bjørn-Helge Mevik
Sent: Thursday, October 12, 2023 11:56
To: slurm-users at schedmd.com
Subject: Re: [slurm-users] Slurm versions 23.02.6 and 22.05.10 are now available (CVE-2023-41914)

Taras Shapovalov <tshapovalov at nvidia.com> writes:

> Are the older versions affected as well?

Yes, all older versjons are affected.

--
B/H

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schedmd.com/pipermail/slurm-users/attachments/20231013/788d665a/attachment.htm>