Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2304-1

Опубликовано: 06 июл. 2022
Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

  • CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)

Список пакетов

Image SLES15-SP4-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-HPC-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Hardened-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Hardened-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Hardened-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Hardened-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-3-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-Micro-5-4-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
Image SLES15-SP4-SAP-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-Hardened-BYOS
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-bash-completion-3004-150400.8.8.1
salt-doc-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-zsh-completion-3004-150400.8.8.1
SUSE Linux Enterprise Module for Server Applications 15 SP4
salt-api-3004-150400.8.8.1
salt-cloud-3004-150400.8.8.1
salt-fish-completion-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-proxy-3004-150400.8.8.1
salt-ssh-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
salt-syndic-3004-150400.8.8.1
SUSE Linux Enterprise Module for Transactional Server 15 SP4
salt-transactional-update-3004-150400.8.8.1
openSUSE Leap 15.4
python3-salt-3004-150400.8.8.1
salt-3004-150400.8.8.1
salt-api-3004-150400.8.8.1
salt-bash-completion-3004-150400.8.8.1
salt-cloud-3004-150400.8.8.1
salt-doc-3004-150400.8.8.1
salt-fish-completion-3004-150400.8.8.1
salt-master-3004-150400.8.8.1
salt-minion-3004-150400.8.8.1
salt-proxy-3004-150400.8.8.1
salt-ssh-3004-150400.8.8.1
salt-standalone-formulas-configuration-3004-150400.8.8.1
salt-syndic-3004-150400.8.8.1
salt-transactional-update-3004-150400.8.8.1
salt-zsh-completion-3004-150400.8.8.1

Ссылки

Описание

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.

Затронутые продукты
Image SLES15-SP4-BYOS-Azure:python3-salt-3004-150400.8.8.1
Image SLES15-SP4-BYOS-Azure:salt-3004-150400.8.8.1
Image SLES15-SP4-BYOS-Azure:salt-minion-3004-150400.8.8.1
Image SLES15-SP4-BYOS-EC2:python3-salt-3004-150400.8.8.1
Ссылки
Уязвимость SUSE-SU-2022:2304-1