-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Sep 2026 15:28:59 +0800
Source: slurm-wlm
Binary: slurm-wlm-doc slurm-wlm-torque
Architecture: all
Version: 24.11.5-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 slurm-wlm-doc - Slurm documentation
 slurm-wlm-torque - Torque compatibility wrappers for Slurm
Closes: 1146563
Changes:
 slurm-wlm (24.11.5-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * Fix multiple security issues by backporting the upstream fixes from the
     slurm-25.05 branch (Closes: #1146563):
   * CVE-2026-65107: sbcast shared objects skipped credential verification,
     and slurmd could crash on invalid sbcast filenames.
   * CVE-2026-65108: slurmstepd stack overflow when a job environment
     contains an oversized SPANK option variable.
   * CVE-2026-65109: slurmstepd could remove files outside the container
     spool directory when cleaning up an OCI container, and left spool
     directories behind when ContainerPath contains a task id pattern.
   * CVE-2026-65138: heap over-read and NULL pointer dereference in slurmd
     when unpacking a malformed forward data RPC.
   * CVE-2026-65139: slurmdbd used unsafe cluster names and non-numeric id
     lists in accounting database queries.
   * CVE-2026-65140: privilege escalation where an operator could alter
     Administrator accounts through the accounting database.
   * CVE-2026-65165: a job step using arbitrary distribution could end up
     with a node count disagreeing with its node list. The count is now taken
     from the list, hostlist functions are rejected in it, and a list that
     disagrees with the requested node count is refused.
   * Fix possible slurmstepd crash on step socket requests with invalid
     lengths.
Checksums-Sha1:
 bb4fa7818a86cdea851d395b1ddfeab5bcb9a48b 1951976 slurm-wlm-doc_24.11.5-4+deb13u1_all.deb
 4ee5acb3dc8728fd344e390d70afeb31fd3e3aa9 49056 slurm-wlm-torque_24.11.5-4+deb13u1_all.deb
 001bea27ee18e7458a8d8fb9724ab9397e8eab81 16517 slurm-wlm_24.11.5-4+deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 470b88daa8c895fcc9b6d91989032d210fdbbe93a86fc5878228ddb571296be8 1951976 slurm-wlm-doc_24.11.5-4+deb13u1_all.deb
 f41a559f7b2072ac355277f92572b27f85cb773e1f560dc4eebdaaa412a606c5 49056 slurm-wlm-torque_24.11.5-4+deb13u1_all.deb
 be1529e7220f4b23ce8c0be04eede6c80c2fdb4cbf7855960b2dccf958daf0ec 16517 slurm-wlm_24.11.5-4+deb13u1_all-buildd.buildinfo
Files:
 3388bc4784bf7244fa58fe7b65b3f571 1951976 doc optional slurm-wlm-doc_24.11.5-4+deb13u1_all.deb
 f7d143aebfda53e50187870235904d9c 49056 admin optional slurm-wlm-torque_24.11.5-4+deb13u1_all.deb
 65b37980b3c09ade63d582bb91006f0c 16517 admin optional slurm-wlm_24.11.5-4+deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=yhA1
-----END PGP SIGNATURE-----