Security update for slurm (important)

An update that solves three vulnerabilities and has three
fixes is now available.

Description:

This update for slurm to version 18.08.9 fixes the following issues:

Security issues fixed:

• CVE-2019-19728: Fixed a privilege escalation with srun, where --uid
  might have unintended side effects (bsc#1159692).
• CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue (bnc#1140709).
• CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784).

Bug fixes:

• Fix ownership of /var/spool/slurm on new installations and upgrade
  (bsc#1158696).
• Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).
• Move srun from ‘slurm’ to ‘slurm-node’: srun is required on the nodes as
  well so sbatch will work. ‘slurm-node’ is a requirement when ‘slurm’ is
  installed (bsc#1153095).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-85=1