Security update for munge
Announcement ID: | SUSE-SU-2020:1144-1 |
---|---|
Rating: | moderate |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves one vulnerability and has one security fix can now be installed.
Description:
This update for munge to 0.5.14 fixes the following issues:
Security issue fixed:
- CVE-2019-3691: Fixed a local privilege escalation during update (bsc#1155075)
Non-security issue fixed:
- Add Provides for 'munge-libs' to package libmunge (bsc#1160075).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
HPC Module 12
zypper in -t patch SUSE-SLE-Module-HPC-12-2020-1144=1
Package List:
-
HPC Module 12 (aarch64 x86_64)
- libmunge2-0.5.14-3.6.1
- munge-0.5.14-3.6.1
- munge-debugsource-0.5.14-3.6.1
- libmunge2-debuginfo-0.5.14-3.6.1
- munge-debuginfo-0.5.14-3.6.1
- munge-devel-0.5.14-3.6.1