[SECURITY] Fedora 45 Update: slurm-26.05.4-1.fc45

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Fedora 45 : slurm (2026-74510edd4e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-74510edd4e advisory. Update to 26.05.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

[SECURITY] [DSA 6491-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/security/ Aron Xu September 09, 2026 https://www.debian.org/security/faq -...

Debian dsa-6491 : libpam-slurm - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6491 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/securit...

UBUNTU-CVE-2026-65109

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern...

CVE-2026-65138

Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a malformed forward data RPC with a missing socket address...

UBUNTU-CVE-2026-65139

Fix various issues in unsafe operation/queries to the slurmdbd...

Linux Distros Unpatched Vulnerability : CVE-2026-65165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues around job steps and node count discrepancies CVE-2026-65165 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-65107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

CVE-2026-65139

Fix various issues in unsafe operation/queries to the slurmdbd...

Linux Distros Unpatched Vulnerability : CVE-2026-65140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...

Linux Distros Unpatched Vulnerability : CVE-2026-65108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable CVE-2026-65108...

Linux Distros Unpatched Vulnerability : CVE-2026-65138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a...

Linux Distros Unpatched Vulnerability : CVE-2026-65139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues in unsafe operation/queries to the slurmdbd CVE-2026-65139 Note that Nessus relies on the...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-2614 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-0545 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-4035 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-4035 Source advisory: OSV:GHSA-G35P-PX32-WHV6...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-2393 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-2393 Source advisory: OSV:GHSA-65H7-C7C4-MGHX...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-2393 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-2393 Source advisory: OSV:PYSEC-2026-2219...

Ubuntu 22.04 LTS / 24.04 LTS : Slurm vulnerabilities (USN-8236-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8236-1 advisory. It was discovered that Slurm did not correctly handle certain file system operations. An attacker could possibly use this issue to modify fil...