[SECURITY] Fedora 45 Update: slurm-26.05.4-1.fc45

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Fedora 45 : slurm (2026-74510edd4e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-74510edd4e advisory. Update to 26.05.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

[SECURITY] [DSA 6491-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/security/ Aron Xu September 09, 2026 https://www.debian.org/security/faq -...

Debian dsa-6491 : libpam-slurm - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6491 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/securit...

UBUNTU-CVE-2026-65109

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern...

Linux Distros Unpatched Vulnerability : CVE-2026-65108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a stack overflow flaw in slurmstepd when a job environment contains an oversized SPANK option variable. CVE-2026-65108 Note that...

CVE-2026-65139

Fix various issues in unsafe operation/queries to the slurmdbd...

Linux Distros Unpatched Vulnerability : CVE-2026-65140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a privilege escalation flaw within the accounting database layer that allows a lower-privileged operator account to alter...

Linux Distros Unpatched Vulnerability : CVE-2026-65139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a failure to validate inputs on accounting usage, addition, and runaway job paths, allowing unsafe cluster names or non-numeric ...

UBUNTU-CVE-2026-65139

Fix various issues in unsafe operation/queries to the slurmdbd...

CVE-2026-65138

Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a malformed forward data RPC with a missing socket address...

Linux Distros Unpatched Vulnerability : CVE-2026-65107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a security flaw in the sbcast tool where shared library files can bypass credential checks, leading to a possible slurmd daemon...

Linux Distros Unpatched Vulnerability : CVE-2026-65165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a logic processing flaw when handling job steps using an arbitrary node distribution, leading to node count discrepancies...

Linux Distros Unpatched Vulnerability : CVE-2026-65138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a heap over-read flaw in slurmd when unpacking a malformed forward data RPC or handling a forward data RPC with a missing socket...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-64849 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-3198 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-2734 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-4137 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-2614 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2025-15381 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...