Security update for slurm_20_02 (important)

An update that solves three vulnerabilities and has one
errata is now available.

Description:

This update for slurm_20_02 fixes the following issues:

• CVE-2022-31251: Fixed security vulnerability in the test package
  (bsc#1201674).
• CVE-2022-29500: Fixed architectural flaw that can be exploited to allow
  an unprivileged user to execute arbitrary processes as root
  (bsc#1199278).
• CVE-2022-29501: Fixed vulnerability where an unprivileged user can send
  data to arbitrary unix socket as root (bsc#1199279).

Bugfixes:

• Fixed qstat error message (torque wrapper) (bsc#1186646).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4:

  zypper in -t patch openSUSE-SLE-15.4-2022-3491=1

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-3491=1

• SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS:

  zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3491=1

• SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS:

  zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3491=1