File _patchinfo of Package patchinfo.31609

<patchinfo incident="31609">
  <issue tracker="bnc" id="1216869">L3: slurm-sview illogically updates to slurm_23_02-sview</issue>
  <issue tracker="bnc" id="1216207">VUL-0: CVE-2023-41914: slurm,slurm_18_08,slurm_20_02,slurm_20_11,slurm_22_05,slurm_23_02,slurmlibs:</issue>
  <issue tracker="bnc" id="1208810">[slurm_22_05, cray] Missing Conflicts and Provides may lead to dependency issues during Upgrade</issue>
  <issue tracker="cve" id="2023-41914"/>
  <packager>eeich</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for slurm_22_05</summary>
  <description>This update for slurm_22_05 fixes the following issues:

- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).

Bug fixes:

- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).
- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).
</description>
</patchinfo>
openSUSE Build Service is sponsored by