Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0055-1

Опубликовано: 13 янв. 2021
Источник: suse-cvrf

Описание

Security update for crmsh

This update for crmsh fixes the following issue:

  • CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
crmsh-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
crmsh-scripts-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
crmsh-test-4.2.0+git.1607075079.a25648d8-lp152.4.39.1

Ссылки

Описание

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.

Затронутые продукты
openSUSE Leap 15.2:crmsh-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
openSUSE Leap 15.2:crmsh-scripts-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
openSUSE Leap 15.2:crmsh-test-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
Ссылки