Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2154-1

Опубликовано: 22 июн. 2022
Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

  • CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could lead to authentication bypass when using PAM (bsc#1200566)

Список пакетов

Image SLES12-SP5-Azure-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-Azure-HPC-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-Azure-SAP-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-EC2-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-EC2-SAP-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-GCE-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
Image SLES12-SP5-GCE-SAP-BYOS
python2-salt-3000-65.1
salt-3000-65.1
salt-minion-3000-65.1
SUSE Linux Enterprise Module for Advanced Systems Management 12
python2-salt-3000-65.1
salt-3000-65.1
salt-api-3000-65.1
salt-bash-completion-3000-65.1
salt-cloud-3000-65.1
salt-doc-3000-65.1
salt-master-3000-65.1
salt-minion-3000-65.1
salt-proxy-3000-65.1
salt-ssh-3000-65.1
salt-standalone-formulas-configuration-3000-65.1
salt-syndic-3000-65.1
salt-zsh-completion-3000-65.1
SUSE Manager Client Tools 12
python2-salt-3000-65.1
python3-salt-3000-65.1
salt-3000-65.1
salt-doc-3000-65.1
salt-minion-3000-65.1

Ссылки

Описание

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:python2-salt-3000-65.1
Image SLES12-SP5-Azure-BYOS:salt-3000-65.1
Image SLES12-SP5-Azure-BYOS:salt-minion-3000-65.1
Image SLES12-SP5-Azure-HPC-BYOS:python2-salt-3000-65.1
Ссылки