Accepting request 975440 from network:cluster

OBS-URL: https://build.opensuse.org/request/show/975440
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/slurm?expand=0&rev=71

slurm-21.08.7.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:43f3e978d8c2682c3d2e80517a03d836c53ab5a7587870ce8259da5232ab4fa3
-size 6744881

slurm-21.08.8.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6ec10bc5c7b718df23d28aeaef9965d619fd341a755be1d08339b11649b154ea
+size 6747681

slurm.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri May  6 09:33:34 UTC 2022 - Christian Goll <cgoll@suse.com>
+
+- Update to 21.08.8 which fixes CVE-2022-29500, CVE-2022-29501
+  and CVE-2022-29502
+- Added 'CommunicationParameters=block_null_hash' to slurm.conf, please
+  add this parameter to existing configurations.
+
 -------------------------------------------------------------------
 Mon May  2 14:12:59 UTC 2022 - Christian Goll <cgoll@suse.com>
  - Update to 21.08.7 with following changes:

slurm.spec

@@ -18,7 +18,7 @@
 
 # Check file META in sources: update so_version to (API_CURRENT - API_AGE)
 %define so_version 37
-%define ver 21.08.7
+%define ver 21.08.8
 %define _ver _21_08
 %define dl_ver %{ver}
 # so-version is 0 and seems to be stable
@@ -650,6 +650,8 @@ sed -i -e '/^ControlMachine=/i# Ordered List of Control Nodes' \
     -e '/.*ControlAddr=.*/d' \
     -e '/.*BackupAddr=.*/d'  %{buildroot}/%{_sysconfdir}/%{pname}/slurm.conf
 cat >>%{buildroot}/%{_sysconfdir}/%{pname}/slurm.conf <<EOF
+# Potential exploit mitigation CVE-2022-29500
+CommunicationParameters=block_null_hash
 # SUSE default configuration
 PropagateResourceLimitsExcept=MEMLOCK
 NodeName=linux State=UNKNOWN