From 950ae37e78c1aa4e2c3f486f801aa468e8e899ff1ebbd0511139b645c9aa3419 Mon Sep 17 00:00:00 2001
From: Christian Goll <cgoll@suse.com>
Date: Fri, 6 May 2022 15:13:12 +0000
Subject: [PATCH] Accepting request 975374 from
 home:mslacken:branches:network:cluster

- Update to 21.08.8 which fixes CVE-2022-29500, CVE-2022-29501
  and CVE-2022-29502
- Added 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations.

OBS-URL: https://build.opensuse.org/request/show/975374
OBS-URL: https://build.opensuse.org/package/show/network:cluster/slurm?expand=0&rev=198
---
 slurm-21.08.7.tar.bz2 | 3 ---
 slurm-21.08.8.tar.bz2 | 3 +++
 slurm.changes         | 8 ++++++++
 slurm.spec            | 4 +++-
 4 files changed, 14 insertions(+), 4 deletions(-)
 delete mode 100644 slurm-21.08.7.tar.bz2
 create mode 100644 slurm-21.08.8.tar.bz2

diff --git a/slurm-21.08.7.tar.bz2 b/slurm-21.08.7.tar.bz2
deleted file mode 100644
index b10dad3..0000000
--- a/slurm-21.08.7.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:43f3e978d8c2682c3d2e80517a03d836c53ab5a7587870ce8259da5232ab4fa3
-size 6744881
diff --git a/slurm-21.08.8.tar.bz2 b/slurm-21.08.8.tar.bz2
new file mode 100644
index 0000000..0d268d3
--- /dev/null
+++ b/slurm-21.08.8.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6ec10bc5c7b718df23d28aeaef9965d619fd341a755be1d08339b11649b154ea
+size 6747681
diff --git a/slurm.changes b/slurm.changes
index 30c126d..d7a12b6 100644
--- a/slurm.changes
+++ b/slurm.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri May  6 09:33:34 UTC 2022 - Christian Goll <cgoll@suse.com>
+
+- Update to 21.08.8 which fixes CVE-2022-29500, CVE-2022-29501
+  and CVE-2022-29502
+- Added 'CommunicationParameters=block_null_hash' to slurm.conf, please
+  add this parameter to existing configurations.
+
 -------------------------------------------------------------------
 Mon May  2 14:12:59 UTC 2022 - Christian Goll <cgoll@suse.com>
  - Update to 21.08.7 with following changes:
diff --git a/slurm.spec b/slurm.spec
index 70556a6..a44e830 100644
--- a/slurm.spec
+++ b/slurm.spec
@@ -18,7 +18,7 @@
 
 # Check file META in sources: update so_version to (API_CURRENT - API_AGE)
 %define so_version 37
-%define ver 21.08.7
+%define ver 21.08.8
 %define _ver _21_08
 %define dl_ver %{ver}
 # so-version is 0 and seems to be stable
@@ -650,6 +650,8 @@ sed -i -e '/^ControlMachine=/i# Ordered List of Control Nodes' \
     -e '/.*ControlAddr=.*/d' \
     -e '/.*BackupAddr=.*/d'  %{buildroot}/%{_sysconfdir}/%{pname}/slurm.conf
 cat >>%{buildroot}/%{_sysconfdir}/%{pname}/slurm.conf <<EOF
+# Potential exploit mitigation CVE-2022-29500
+CommunicationParameters=block_null_hash
 # SUSE default configuration
 PropagateResourceLimitsExcept=MEMLOCK
 NodeName=linux State=UNKNOWN