Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21111-1

Опубликовано: 19 июн. 2026
Источник: suse-cvrf

Описание

Security update for himmelblau

This update for himmelblau fixes the following issue

  • CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant (DAG) flow (bsc#1266662).

Changes for himmelblau:

  • Update to version 2.3.11+git1.116c6763:
  • Update cargo vet audits for backport
  • deps(rust): bump the all-cargo-updates group with 19 updates
  • Update to version 2.3.10:
  • nss/pam: bail out early when SYSTEMD_ACTIVATION_UNIT points to himmelblau
  • selinux: allow unconfined_service_t to search himmelblaud_t dirs

Список пакетов

openSUSE Leap 16.0
himmelblau-2.3.11+git1.116c6763-160000.1.1
himmelblau-qr-greeter-2.3.11+git1.116c6763-160000.1.1
himmelblau-sshd-config-2.3.11+git1.116c6763-160000.1.1
himmelblau-sso-2.3.11+git1.116c6763-160000.1.1
libnss_himmelblau2-2.3.11+git1.116c6763-160000.1.1
pam-himmelblau-2.3.11+git1.116c6763-160000.1.1

Ссылки

Описание

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to before 3.1.5 and 2.3.11, Himmelblau contained an authentication bypass vulnerability in the Device Authorization Grant (DAG) flow that allowed a user within the same Entra ID domain to obtain a local Unix session as another user by providing their own valid credentials. The vulnerability existed in the token_validate function, which validated domain aliases for legitimate multi-domain scenarios but failed to verify that the local part (username) of the authenticated user's UPN matched the requested account username. The function only compared domains, not the complete usernames. This vulnerability is fixed in 3.1.5 and 2.3.11.

Затронутые продукты
openSUSE Leap 16.0:himmelblau-2.3.11+git1.116c6763-160000.1.1
openSUSE Leap 16.0:himmelblau-qr-greeter-2.3.11+git1.116c6763-160000.1.1
openSUSE Leap 16.0:himmelblau-sshd-config-2.3.11+git1.116c6763-160000.1.1
openSUSE Leap 16.0:himmelblau-sso-2.3.11+git1.116c6763-160000.1.1
Ссылки