Debian alert DLA-1367-1 (slurm-llnl)

From:
    	     
 
Thorsten Alteholz <debian@alteholz.de> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 1367-1] slurm-llnl security update 
Date:
    	     
 
Sat, 28 Apr 2018 19:59:06 +0200 (CEST)
Message-ID:
    	     
 
<alpine.DEB.2.02.1804281951390.11456@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : slurm-llnl
Version        : 2.3.4-2+deb7u2
CVE ID         : CVE-2018-7033


CVE-2018-7033
   An issue that could be used for SQL Injection attacks against
   SlurmDBD has been fixed.


For Debian 7 "Wheezy", these problems have been fixed in version
2.3.4-2+deb7u2.

We recommend that you upgrade your slurm-llnl packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQJ8BAEBCgBmBQJa5LZqXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2MjAxRkJGRkRCQkRFMDc4MjJFQUJCOTY5
NkZDQUMwRDM4N0I1ODQ3AAoJEJb8rA04e1hHJK8QALxWeid79lFSRRFGadlW2ZS+
hhsc2pc1ETE6ebCau1ykud2yEekWRNAKnZTc7GU5Ri1qn3BVC+NQlIDuNzpMEh28
h9xVmGHo2GwxQ+HJkuYFtpod8l1MoOYTQusyFMkuaJxynGxG14Ly+CxGxHu6cXt4
DD95q0HV9GcRhXDF6IAz4wJcmxdqiLwIVCEzlDHf1MiPFaGIcd+N5j8oBJ7ByzcU
Pq/LM9SIZO59GYn8nH5Xw+Gvr+4OuCh1cuS8ZOdRO/Lbmyt7fM+Vx5ApyADbn0pD
ITY8KXjFSS0X9FpUwBZUOuJ3d/IkbtzUrULjfeyrlHRVwQnq/YLO/1j0wy7Wr2Rq
QEYDK+NINUM0QQiMZ4/KqVYicAG9X+gZ9jPS5iGgvOYRemMkJ4+AfghYzP1HfDri
Xmxd5xdsLzAIl5tvK5XEyhlnqNwCO0Aj8koOErGvTpxV6XTNbyBlITsB0FQVoa7h
CMAeMCiVQB4OWFre9KPx2Qoh3biG5KxrFTCQstxTmmIA8ho0ZNjBWm8/iTfKptFA
e/i58JcCDX3t0dNUdYoAWlHLM3MM+vRU92fJYunF2wtI6+4c/gjFD10i0KwMOiWk
YhePve1CCKHbzT4KCAWPX6d07fJEUdyMO6+RRrg5abYlQxpaCsGYC/3SfY8K5uZh
uia36y7mj5+ihYpYz9La
=keZi
-----END PGP SIGNATURE-----