File _patchinfo of Package patchinfo
<patchinfo incident="14715"> <issue tracker="cve" id="2020-12693"/> <issue tracker="bnc" id="1172004">VUL-0: CVE-2020-12693: slurm: Authentication Bypass via an Alternate Path or Channel when Message Aggregation is enabled</issue> <packager>eeich</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for slurm_18_08</summary> <description>This update for slurm_18_08 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to launch a process as an arbitrary user. (CVE-2020-12693, bsc#1172004). Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch - Remove unneeded build dependency to postgresql-devel. This update was imported from the SUSE:SLE-15:Update update project.</description> </patchinfo>