SUSE-SU-2022:2178-1

Опубликовано: 24 июн. 2022

Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass PAM authentication (bsc#1200566)

Список пакетов

Image SLES15-SP3-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-HPC-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-HPC-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-api-3004-150300.53.24.1

salt-master-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-api-3004-150300.53.24.1

salt-master-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-api-3004-150300.53.24.1

salt-master-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

Image SLES15-SP3-SAP-BYOS-Azure

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

Image SLES15-SP3-SAP-BYOS-GCE

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

SUSE Linux Enterprise Micro 5.1

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

SUSE Linux Enterprise Micro 5.2

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-bash-completion-3004-150300.53.24.1

salt-doc-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-zsh-completion-3004-150300.53.24.1

SUSE Linux Enterprise Module for Server Applications 15 SP3

salt-api-3004-150300.53.24.1

salt-cloud-3004-150300.53.24.1

salt-fish-completion-3004-150300.53.24.1

salt-master-3004-150300.53.24.1

salt-proxy-3004-150300.53.24.1

salt-ssh-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

salt-syndic-3004-150300.53.24.1

SUSE Linux Enterprise Module for Transactional Server 15 SP3

salt-transactional-update-3004-150300.53.24.1

openSUSE Leap 15.3

python3-salt-3004-150300.53.24.1

salt-3004-150300.53.24.1

salt-api-3004-150300.53.24.1

salt-bash-completion-3004-150300.53.24.1

salt-cloud-3004-150300.53.24.1

salt-doc-3004-150300.53.24.1

salt-fish-completion-3004-150300.53.24.1

salt-master-3004-150300.53.24.1

salt-minion-3004-150300.53.24.1

salt-proxy-3004-150300.53.24.1

salt-ssh-3004-150300.53.24.1

salt-standalone-formulas-configuration-3004-150300.53.24.1

salt-syndic-3004-150300.53.24.1

salt-transactional-update-3004-150300.53.24.1

salt-zsh-completion-3004-150300.53.24.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222178-1/
Link for SUSE-SU-2022:2178-1
https://lists.suse.com/pipermail/sle-security-updates/2022-June/011350.html
E-Mail link for SUSE-SU-2022:2178-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1200566
SUSE Bug 1200566
https://www.suse.com/security/cve/CVE-2022-22967/
SUSE CVE CVE-2022-22967 page

Описание

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.

Затронутые продукты

Image SLES15-SP3-BYOS-Azure:python3-salt-3004-150300.53.24.1

Image SLES15-SP3-BYOS-Azure:salt-3004-150300.53.24.1

Image SLES15-SP3-BYOS-Azure:salt-minion-3004-150300.53.24.1

Image SLES15-SP3-BYOS-EC2-HVM:python3-salt-3004-150300.53.24.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-22967.html
CVE-2022-22967
https://bugzilla.suse.com/1200566
SUSE Bug 1200566

SUSE-SU-2022:2178-1

Описание

Список пакетов

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Server Applications 15 SP3

SUSE Linux Enterprise Module for Transactional Server 15 SP3

openSUSE Leap 15.3

Ссылки

Уязвимость: CVE-2022-22967

Описание

Затронутые продукты

Ссылки