CVE-2025-43904

Updated slurm packages to fix a vulnerability in the Slurm’s accounting system that would have allowed a Coordinator to promote a user to Administrator (CVE-2025-43904).

These are all security issues fixed in the libnss_slurm2-24.11.5-1.1 package on the GA media of openSUSE Tumbleweed.

This update for slurm fixes the following issues:

Update to version 24.11.5.

Security issues fixed:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

Other changes and issues fixed:

• Changes from version 24.11.5

  • Return error to scontrol reboot on bad nodelists.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.40 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.41 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.42 endpoints.
  • data_parser/v0.0.42 - Added +inline_enums flag which modifies the output when generating OpenAPI specification. It causes enum arrays to not be defined in their own schema with references ($ref) to them. Instead they will be dumped inline.
  • Fix binding error with tres-bind map/mask on partial node allocations.
  • Fix stepmgr enabled steps being able to request features.
  • Reject step creation if requested feature is not available in job.
  • slurmd - Restrict listening for new incoming RPC requests further into startup.
  • slurmd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Restrict processing new incoming RPC requests further into startup. Stop processing requests sooner during shutdown.
  • slurmcltd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Avoid race condition during shutdown or ereconfigure that could result in a crash due delayed processing of a connection while plugins are unloaded.
  • Fix small memleak when getting the job list from the database.
  • Fix incorrect printing of % escape characters when printing stdio fields for jobs.
  • Fix padding parsing when printing stdio fields for jobs.
  • Fix printing %A array job id when expanding patterns.
  • Fix reservations causing jobs to be held for Bad Constraints.
  • switch/hpe_slingshot - Prevent potential segfault on failed curl request to the fabric manager.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • switch/hpe_slingshot - Fix VNI range not updating on slurmctld restart or reconfigre.
  • Fix steps not being created when using certain combinations of -c and -n inferior to the jobs requested resources, when using stepmgr and nodes are configured with CPUs == Sockets*CoresPerSocket.
  • Permit configuring the number of retry attempts to destroy CXI service via the new destroy_retries SwitchParameter.
  • Do not reset memory.high and memory.swap.max in slurmd startup or reconfigure as we are never really touching this in slurmd.
  • Fix reconfigure failure of slurmd when it has been started manually and the CoreSpecLimits have been removed from slurm.conf.
  • Set or reset CoreSpec limits when slurmd is reconfigured and it was started with systemd.
  • switch/hpe-slingshot - Make sure the slurmctld can free step VNIs after the controller restarts or reconfigures while the job is running.
  • Fix backup slurmctld failure on 2nd takeover.

• Changes from version 24.11.4

  • slurmctld,slurmrestd - Avoid possible race condition that could have caused process to crash when listener socket was closed while accepting a new connection.
  • slurmrestd - Avoid race condition that could have resulted in address logged for a UNIX socket to be incorrect.
  • slurmrestd - Fix parameters in OpenAPI specification for the following endpoints to have job_id field:

    GET /slurm/v0.0.40/jobs/state/
    GET /slurm/v0.0.41/jobs/state/
    GET /slurm/v0.0.42/jobs/state/
    GET /slurm/v0.0.43/jobs/state/
    

  …

This update for slurm_23_02 fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm_20_11 fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm_22_05 fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm_22_05 fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm_24_11 fixes the following issues:

Update to version 24.11.5.

Security issues fixed:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

Other changes and issues fixed:

• Changes from version 24.11.5

  • Return error to scontrol reboot on bad nodelists.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.40 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.41 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.42 endpoints.
  • data_parser/v0.0.42 - Added +inline_enums flag which modifies the output when generating OpenAPI specification. It causes enum arrays to not be defined in their own schema with references ($ref) to them. Instead they will be dumped inline.
  • Fix binding error with tres-bind map/mask on partial node allocations.
  • Fix stepmgr enabled steps being able to request features.
  • Reject step creation if requested feature is not available in job.
  • slurmd - Restrict listening for new incoming RPC requests further into startup.
  • slurmd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Restrict processing new incoming RPC requests further into startup. Stop processing requests sooner during shutdown.
  • slurmcltd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Avoid race condition during shutdown or ereconfigure that could result in a crash due delayed processing of a connection while plugins are unloaded.
  • Fix small memleak when getting the job list from the database.
  • Fix incorrect printing of % escape characters when printing stdio fields for jobs.
  • Fix padding parsing when printing stdio fields for jobs.
  • Fix printing %A array job id when expanding patterns.
  • Fix reservations causing jobs to be held for Bad Constraints.
  • switch/hpe_slingshot - Prevent potential segfault on failed curl request to the fabric manager.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • switch/hpe_slingshot - Fix VNI range not updating on slurmctld restart or reconfigre.
  • Fix steps not being created when using certain combinations of -c and -n inferior to the jobs requested resources, when using stepmgr and nodes are configured with CPUs == Sockets*CoresPerSocket.
  • Permit configuring the number of retry attempts to destroy CXI service via the new destroy_retries SwitchParameter.
  • Do not reset memory.high and memory.swap.max in slurmd startup or reconfigure as we are never really touching this in slurmd.
  • Fix reconfigure failure of slurmd when it has been started manually and the CoreSpecLimits have been removed from slurm.conf.
  • Set or reset CoreSpec limits when slurmd is reconfigured and it was started with systemd.
  • switch/hpe-slingshot - Make sure the slurmctld can free step VNIs after the controller restarts or reconfigures while the job is running.
  • Fix backup slurmctld failure on 2nd takeover.

• Changes from version 24.11.4

  • slurmctld,slurmrestd - Avoid possible race condition that could have caused process to crash when listener socket was closed while accepting a new connection.
  • slurmrestd - Avoid race condition that could have resulted in address logged for a UNIX socket to be incorrect.
  • slurmrestd - Fix parameters in OpenAPI specification for the following endpoints to have job_id field:

    GET /slurm/v0.0.40/jobs/state/
    GET /slurm/v0.0.41/jobs/state/
    GET /slurm/v0.0.42/jobs/state/
    GET /slurm/v0.0.43/jobs/state/…
    

This update for slurm_23_02 fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

This update for slurm_24_11 fixes the following issues:

Update to version 24.11.5.

Security issues fixed:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

Other changes and issues fixed:

• Changes from version 24.11.5

  • Return error to scontrol reboot on bad nodelists.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.40 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.41 endpoints.
  • slurmrestd - Report an error when QOS resolution fails for v0.0.42 endpoints.
  • data_parser/v0.0.42 - Added +inline_enums flag which modifies the output when generating OpenAPI specification. It causes enum arrays to not be defined in their own schema with references ($ref) to them. Instead they will be dumped inline.
  • Fix binding error with tres-bind map/mask on partial node allocations.
  • Fix stepmgr enabled steps being able to request features.
  • Reject step creation if requested feature is not available in job.
  • slurmd - Restrict listening for new incoming RPC requests further into startup.
  • slurmd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Restrict processing new incoming RPC requests further into startup. Stop processing requests sooner during shutdown.
  • slurmcltd - Avoid auth/slurm related hangs of CLI commands during startup and shutdown.
  • slurmctld - Avoid race condition during shutdown or ereconfigure that could result in a crash due delayed processing of a connection while plugins are unloaded.
  • Fix small memleak when getting the job list from the database.
  • Fix incorrect printing of % escape characters when printing stdio fields for jobs.
  • Fix padding parsing when printing stdio fields for jobs.
  • Fix printing %A array job id when expanding patterns.
  • Fix reservations causing jobs to be held for Bad Constraints.
  • switch/hpe_slingshot - Prevent potential segfault on failed curl request to the fabric manager.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • Fix printing incorrect array job id when expanding stdio file names. The %A will now be substituted by the correct value.
  • switch/hpe_slingshot - Fix VNI range not updating on slurmctld restart or reconfigre.
  • Fix steps not being created when using certain combinations of -c and -n inferior to the jobs requested resources, when using stepmgr and nodes are configured with CPUs == Sockets*CoresPerSocket.
  • Permit configuring the number of retry attempts to destroy CXI service via the new destroy_retries SwitchParameter.
  • Do not reset memory.high and memory.swap.max in slurmd startup or reconfigure as we are never really touching this in slurmd.
  • Fix reconfigure failure of slurmd when it has been started manually and the CoreSpecLimits have been removed from slurm.conf.
  • Set or reset CoreSpec limits when slurmd is reconfigured and it was started with systemd.
  • switch/hpe-slingshot - Make sure the slurmctld can free step VNIs after the controller restarts or reconfigures while the job is running.
  • Fix backup slurmctld failure on 2nd takeover.

• Changes from version 24.11.4

  • slurmctld,slurmrestd - Avoid possible race condition that could have caused process to crash when listener socket was closed while accepting a new connection.
  • slurmrestd - Avoid race condition that could have resulted in address logged for a UNIX socket to be incorrect.
  • slurmrestd - Fix parameters in OpenAPI specification for the following endpoints to have job_id field:

    GET /slurm/v0.0.40/jobs/state/
    GET /slurm/v0.0.41/jobs/state/
    GET /slurm/v0.0.42/jobs/state/
    GET /slurm/v0.0.43/jobs/state/
    

…

This update for slurm fixes the following issues:

• CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

It was discovered that Slurm did not correctly handle certain file system operations. An attacker could possibly use this issue to modify files or leak sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-41914)

Ryan Hall discovered that Slurm did not correctly enforce certain message integrity checks. An attacker could possibly use this issue to bypass integrity checks. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-49933)

Ryan Hall discovered that Slurm did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-49937)

Ryan Hall discovered that Slurm did not correctly handle certain access control mechanisms. An attacker could possibly use this issue to modify files or leak sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-49938)

It was discovered that Slurm did not correctly handle user promotion. An attacker could possibly use this issue to promote themselves to an administrator. (CVE-2025-43904)