Advisoriesby IbisAWSGHSA-x775-rxcq-38x8
Security vulnerability in a third party software, Slurm < 20.11.9 and 21.08.8
Fix: upgrade to 20.11.9 or later
AWS ParallelCluster versions 3.1.4 and 2.11.7 were released in order to update the Slurm software to versions 21.08.8 and 20.11.9, respectively. This change was made in response to SchedMD’s release of these versions on 2022-05-04, to provide fixes related to the following CVEs: CVE-2022-29500, CVE-2022-29501, and CVE-2022-29502.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Slurm Product | < 20.11.9 | 20.11.9 |
Details and references
- Severity from
- GitHub (reviewed advisory)
More AWS advisories
All AWS
Privilege Escalation Vector in CloudWatch Agent for WindowsCVE-2022-23511fixed in 1.247355Issue with configuring session ticket names in s2n-tlsGHSA-m74w-59v6-c5r8fixed in v1.3.23Server denial-of-service by using sslv2 message format in a HelloRetryRequest handshakeGHSA-mm47-wjfh-4hf5fixed in <v1.3.23Partial Path Traversal in aws-cpp-sdk-transferGHSA-g2jj-589x-jvx2fixed in v1.9.318Partial Path Traversal in com.amazonaws:aws-java-sdk-s3CVE-2022-31159fixed in 1.12.261Potential denial of service when sending version negotiation or close packetsGHSA-gj4j-vp5f-86cffixed in v1.1.1