{
  "url": "https://api.github.com/repos/SchedMD/slurm/releases/381592145",
  "assets_url": "https://api.github.com/repos/SchedMD/slurm/releases/381592145/assets",
  "upload_url": "https://uploads.github.com/repos/SchedMD/slurm/releases/381592145/assets{?name,label}",
  "html_url": "https://github.com/SchedMD/slurm/releases/tag/slurm-26-05-4-1",
  "id": 381592145,
  "author": {
    "login": "mcmult",
    "id": 1037016,
    "node_id": "MDQ6VXNlcjEwMzcwMTY=",
    "avatar_url": "https://avatars.githubusercontent.com/u/1037016?v=4",
    "gravatar_id": "",
    "url": "https://api.github.com/users/mcmult",
    "html_url": "https://github.com/mcmult",
    "followers_url": "https://api.github.com/users/mcmult/followers",
    "following_url": "https://api.github.com/users/mcmult/following{/other_user}",
    "gists_url": "https://api.github.com/users/mcmult/gists{/gist_id}",
    "starred_url": "https://api.github.com/users/mcmult/starred{/owner}{/repo}",
    "subscriptions_url": "https://api.github.com/users/mcmult/subscriptions",
    "organizations_url": "https://api.github.com/users/mcmult/orgs",
    "repos_url": "https://api.github.com/users/mcmult/repos",
    "events_url": "https://api.github.com/users/mcmult/events{/privacy}",
    "received_events_url": "https://api.github.com/users/mcmult/received_events",
    "type": "User",
    "user_view_type": "public",
    "site_admin": false
  },
  "node_id": "RE_kwDOAB1das4WvqJR",
  "tag_name": "slurm-26-05-4-1",
  "target_commitish": "master",
  "name": "v26.05.4",
  "draft": false,
  "immutable": false,
  "prerelease": false,
  "created_at": "2026-09-02T21:11:42Z",
  "updated_at": "2026-09-02T21:43:17Z",
  "published_at": "2026-09-02T21:43:17Z",
  "assets": [
    {
      "url": "https://api.github.com/repos/SchedMD/slurm/releases/assets/541798514",
      "id": 541798514,
      "node_id": "RA_kwDOAB1das4gSzBy",
      "name": "slurm-26.05.4.tar.bz2",
      "label": null,
      "uploader": {
        "login": "mcmult",
        "id": 1037016,
        "node_id": "MDQ6VXNlcjEwMzcwMTY=",
        "avatar_url": "https://avatars.githubusercontent.com/u/1037016?v=4",
        "gravatar_id": "",
        "url": "https://api.github.com/users/mcmult",
        "html_url": "https://github.com/mcmult",
        "followers_url": "https://api.github.com/users/mcmult/followers",
        "following_url": "https://api.github.com/users/mcmult/following{/other_user}",
        "gists_url": "https://api.github.com/users/mcmult/gists{/gist_id}",
        "starred_url": "https://api.github.com/users/mcmult/starred{/owner}{/repo}",
        "subscriptions_url": "https://api.github.com/users/mcmult/subscriptions",
        "organizations_url": "https://api.github.com/users/mcmult/orgs",
        "repos_url": "https://api.github.com/users/mcmult/repos",
        "events_url": "https://api.github.com/users/mcmult/events{/privacy}",
        "received_events_url": "https://api.github.com/users/mcmult/received_events",
        "type": "User",
        "user_view_type": "public",
        "site_admin": false
      },
      "content_type": "application/x-bzip2",
      "state": "uploaded",
      "size": 6883455,
      "digest": "sha256:035f4b193d4de979ba5381beca206a50b6b886b2793b06f68a1ce7e67022b06a",
      "download_count": 1414,
      "created_at": "2026-09-02T21:41:28Z",
      "updated_at": "2026-09-02T21:41:28Z",
      "browser_download_url": "https://github.com/SchedMD/slurm/releases/download/slurm-26-05-4-1/slurm-26.05.4.tar.bz2"
    }
  ],
  "tarball_url": "https://api.github.com/repos/SchedMD/slurm/tarball/slurm-26-05-4-1",
  "zipball_url": "https://api.github.com/repos/SchedMD/slurm/zipball/slurm-26-05-4-1",
  "body": "## Changes in 26.05.4\r\n\r\n* slurmctld - Fix double-free when a job partition, QOS, or account update request fails for a job in a reservation.\r\n* Fix bug with heterogeneous job components getting their time limits overwritten due to a rejected component QOS or association update.\r\n* Fix a memory leak in the slurmstepd gethost request handler.\r\n* Fix sinfo and scontrol show node occasionally reporting incorrect node allocated memory while a job memory resize completes.\r\n* Fix sinfo and scontrol show node reporting stale node allocated memory after a job memory resize.\r\n* Fix slurmstepd reading freed memory when PropagatePrioProcess is configured.\r\n* conmgr - Downgrade benign warning logs about deferring connections in client commands to debug2.\r\n* Fix handling of a TLS connection closed before the handshake completes.\r\n* Fix memory leak in slurmd and slurmstepd when unpacking a job credential.\r\n* Fix potential corruption (bumped requeue counter and missing start time) of previous accounting records when requeueing jobs in completing state.\r\n* slurmctld - Prevent condition that could lead to a rare segfault when requeueing completing jobs.\r\n* Fix slurmdbd being unable to run StoragePassScript, hanging for several minutes and failing to retrieve the database password.\r\n* slurmctld - Fix jobs submitted with multiple QoS being moved to a different QoS while in running state, after a reconfigure or controller restart.\r\n* Fix possible slurmstepd crash on IPv6 node address lookups.\r\n* Fix possible slurmstepd crash on invalid step socket requests.\r\n* slurmctld - Prevent condition that could lead to a rare segfault when requeueing completing jobs.\r\n* Fix possible slurmstepd crash on invalid step socket requests.\r\n* tls/s2n - Harden all conmgr RPC listening sockets to automatically reject non-TLS connections in case clients are misconfigured with TLSType=tls/none. This affects api/step_launch (srun/sattach) and swait listening sockets. slurmctld and slurmd already reject non-TLS connections.\r\n* slurmctld,slurmd,slurmrestd - Fix out of bounds write while receiving an HTTP request body.\r\n* slurmctld,slurmd,slurmrestd - Fix duplicate HTTP response being sent for a rejected request.\r\n* slurmctld,slurmd,slurmrestd - Fix HTTP version of a rejected HTTP request.\r\n* slurmctld,slurmd,slurmrestd - Fix Connection header of a rejected HTTP request.\r\n* Fix slurmctld memory leaks when a job requesting GRES or Mode 3 HRES fails to be scheduled on a node.\r\n* Fix slurmctld memory leak on the single-node scheduling retry path when the first topology-aware placement pass fails.\r\n* mpi/pmix - Fix srun intermittently not reporting the status given to MPI_Abort() when the abort comes from a heterogeneous job component.\r\n* mpi/pmix - Fix slurmctld abort when a PMIx error path signals a step of a non-leader het job component.\r\n* slurmctld - Fix potential abort when processing a step cancel request whose SLUID resolves to a different job than its numeric job id, such as one sent by the MPI plugins from a hetjob component.\r\n* slurmctld - Fix MPI_Abort() in one hetjob component leaving the tasks of the other components running when using mpi/pmix or mpi/pmi2.\r\n* srun - Fix repeated Ctrl-C in a hetjob only requesting termination of the first component step through slurmctld.\r\n* slurmctld - Fix cancellation of a hetjob component step canceling the whole component jobs instead of only their steps, and ignoring the KILL_NO_SIG_FAIL flag when doing so.\r\n* slurmctld - Fix scancel wrongly reporting an invalid job id when canceling a step that only exists in some components of a heterogeneous job.\r\n* Fix sbcast shared objects skipping credential verification. CVE-2026-65107.\r\n* Fix possible slurmd crash on invalid sbcast filenames. CVE-2026-65107.\r\n* Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable. CVE-2026-65108.\r\n* Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI container. CVE-2026-65109.\r\n* Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern. CVE-2026-65109.\r\n* Fix heap over-read when unpacking a malformed forward data RPC in slurmd. CVE-2026-65138.\r\n* Fix a slurmd crash when handling a malformed forward data RPC with a missing socket address. CVE-2026-65138.\r\n* Reject cluster names containing characters that are unsafe to use in an accounting database query. CVE-2026-65139.\r\n* Reject unsafe cluster names on the accounting usage, add and runaway job paths. CVE-2026-65139.\r\n* Reject unsafe cluster names when opening a connection to the slurmdbd. CVE-2026-65139.\r\n* Reject non-numeric id values in accounting database queries. CVE-2026-65139.\r\n* Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database. CVE-2026-65140.\r\n* Fix node count of a job step using arbitrary distribution. CVE-2026-65165.\r\n* Reject a hostlist function in the node list of a job step using arbitrary distribution. CVE-2026-65165.\r\n* Reject a job step whose arbitrary node list disagrees with its node count. CVE-2026-65165.",
  "reactions": {
    "url": "https://api.github.com/repos/SchedMD/slurm/releases/381592145/reactions",
    "total_count": 3,
    "+1": 3,
    "-1": 0,
    "laugh": 0,
    "hooray": 0,
    "confused": 0,
    "heart": 0,
    "rocket": 0,
    "eyes": 0
  }
}