File _patchinfo of Package patchinfo.31609
<patchinfo incident="31609">
<issue tracker="bnc" id="1216869">L3: slurm-sview illogically updates to slurm_23_02-sview</issue>
<issue tracker="bnc" id="1216207">VUL-0: CVE-2023-41914: slurm,slurm_18_08,slurm_20_02,slurm_20_11,slurm_22_05,slurm_23_02,slurmlibs:</issue>
<issue tracker="bnc" id="1208810">[slurm_22_05, cray] Missing Conflicts and Provides may lead to dependency issues during Upgrade</issue>
<issue tracker="cve" id="2023-41914"/>
<packager>eeich</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for slurm_22_05</summary>
<description>This update for slurm_22_05 fixes the following issues:
- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).
Bug fixes:
- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).
- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).
</description>
</patchinfo>