Bugzilla – Bug 1179999
VUL-0: CVE-2020-35459: crmsh: Root privilege escalation via hawk_invoke and crmsh
Last modified: 2022-03-10 13:18:16 UTC
thx
Hi Marcus, Please see the patch I created in https://build.suse.de/package/view_file/home:XinLiang:branches:SUSE:SLE-15-SP2:Update/crmsh/0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch?expand=1 Changes include: * Use Path.mkdir instead of system mkdir command * Consider contain ";" in directory name was not sane Please review and give me feedback when you have time Thanks!
For 12sp4/sp5 and 12sp3, changes include: * Use utils.mkdirp instead of system mkdir command * Consider contain ";" in directory name was not sane
Everytime you can avoid using a shell construct and can do it in plain python it's better. I'll have a look now
I just posted to oss-security
please feel free to commit this change to upstream git
SUSE-SU-2021:0085-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 15-SP1 (src): crmsh-4.2.0+git.1607075079.a25648d8-3.51.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0086-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 15-SP2 (src): crmsh-4.2.0+git.1607075079.a25648d8-5.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0084-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP3 (src): crmsh-3.0.4+git.1607490926.e492f845-13.56.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0083-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP5 (src): crmsh-4.1.0+git.1607482714.9633b80d-2.50.1 SUSE Linux Enterprise High Availability 12-SP4 (src): crmsh-4.1.0+git.1607482714.9633b80d-2.50.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0087-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 15 (src): crmsh-4.2.0+git.1607075079.a25648d8-3.56.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:0055-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: openSUSE Leap 15.2 (src): crmsh-4.2.0+git.1607075079.a25648d8-lp152.4.39.1
openSUSE-SU-2021:0073-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1179999 CVE References: CVE-2020-35459 JIRA References: Sources used: openSUSE Leap 15.1 (src): crmsh-4.2.0+git.1607075079.a25648d8-lp151.2.45.1
SUSE-SU-2021:0722-1: An update that solves two vulnerabilities and has four fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180571,1180688 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP5 (src): crmsh-4.1.0+git.1614156984.f4f5e146-2.56.2 SUSE Linux Enterprise High Availability 12-SP4 (src): crmsh-4.1.0+git.1614156984.f4f5e146-2.56.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
According to our tracking hawk2 is tagged as affected also for SUSE:SLE-12-SP2:Update, but no fix was submitted. Could you please give me some context about it?
SUSE-SU-2021:0771-1: An update that solves two vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180571 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP3 (src): crmsh-3.0.4+git.1614156978.4c1dc46d-13.62.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0782-1: An update that solves two vulnerabilities, contains one feature and has 5 fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180137,1180571,1180688 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: ECO-1658 Sources used: SUSE Linux Enterprise High Availability 15-SP1 (src): crmsh-4.3.0+20210219.5d1bf034-3.57.3 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0781-1: An update that solves two vulnerabilities, contains one feature and has 7 fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180126,1180137,1180571,1180688,1181415 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: ECO-1658 Sources used: SUSE Linux Enterprise High Availability 15-SP2 (src): crmsh-4.3.0+20210305.9db5c9a8-5.42.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:0410-1: An update that solves two vulnerabilities and has 7 fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180126,1180137,1180571,1180688,1181415 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: Sources used: openSUSE Leap 15.2 (src): crmsh-4.3.0+20210305.9db5c9a8-lp152.4.47.1
SUSE-SU-2021:0806-1: An update that solves two vulnerabilities, contains one feature and has 5 fixes is now available. Category: security (important) Bug References: 1154927,1178454,1178869,1179999,1180137,1180571,1180688 CVE References: CVE-2020-35459,CVE-2021-3020 JIRA References: ECO-1658 Sources used: SUSE Linux Enterprise High Availability 15 (src): crmsh-4.3.0+20210219.5d1bf034-3.62.3 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0941-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1179999,1182165,1182166 CVE References: CVE-2020-35459,CVE-2021-25314 JIRA References: Sources used: SUSE Linux Enterprise High Availability 15-SP2 (src): hawk2-2.6.3+git.1614684118.af555ad9-3.27.1 SUSE Linux Enterprise High Availability 15-SP1 (src): hawk2-2.6.3+git.1614684118.af555ad9-3.27.1 SUSE Linux Enterprise High Availability 15 (src): hawk2-2.6.3+git.1614684118.af555ad9-3.27.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0942-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1179999,1182165,1182166 CVE References: CVE-2020-35459,CVE-2021-25314 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP5 (src): hawk2-2.6.3+git.1614685906.812c31e9-3.30.1 SUSE Linux Enterprise High Availability 12-SP4 (src): hawk2-2.6.3+git.1614685906.812c31e9-3.30.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:0943-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1179999,1182165,1182166 CVE References: CVE-2020-35459,CVE-2021-25314 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP3 (src): hawk2-2.6.3+git.1614685906.812c31e9-2.42.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:2238-1: An update that solves one vulnerability, contains one feature and has 5 fixes is now available. Category: security (moderate) Bug References: 1163460,1175982,1179999,1184465,1185423,1187553 CVE References: CVE-2020-35459 JIRA References: SLE-17979 Sources used: SUSE Linux Enterprise High Availability 15-SP1 (src): crmsh-4.3.1+20210624.67223df2-3.69.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:2239-1: An update that solves one vulnerability, contains one feature and has 5 fixes is now available. Category: security (moderate) Bug References: 1163460,1175982,1179999,1184465,1185423,1187553 CVE References: CVE-2020-35459 JIRA References: SLE-17979 Sources used: SUSE Linux Enterprise High Availability 15 (src): crmsh-4.3.1+20210624.67223df2-3.74.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:2435-1: An update that solves one vulnerability, contains one feature and has 5 fixes is now available. Category: security (moderate) Bug References: 1163460,1175982,1179999,1184465,1185423,1187553 CVE References: CVE-2020-35459 JIRA References: SLE-17979 Sources used: openSUSE Leap 15.3 (src): crmsh-4.3.1+20210702.4e0ee8fb-5.59.1
SUSE-SU-2021:2435-1: An update that solves one vulnerability, contains one feature and has 5 fixes is now available. Category: security (moderate) Bug References: 1163460,1175982,1179999,1184465,1185423,1187553 CVE References: CVE-2020-35459 JIRA References: SLE-17979 Sources used: SUSE Linux Enterprise High Availability 15-SP3 (src): crmsh-4.3.1+20210702.4e0ee8fb-5.59.1 SUSE Linux Enterprise High Availability 15-SP2 (src): crmsh-4.3.1+20210702.4e0ee8fb-5.59.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:1087-1: An update that solves one vulnerability, contains one feature and has 5 fixes is now available. Category: security (moderate) Bug References: 1163460,1175982,1179999,1184465,1185423,1187553 CVE References: CVE-2020-35459 JIRA References: SLE-17979 Sources used: openSUSE Leap 15.2 (src): crmsh-4.3.1+20210702.4e0ee8fb-lp152.4.59.1
# maintenance_jira_update_notice SUSE-SU-2021:3121-1: An update that solves one vulnerability and has one errata is now available. Category: security (important) Bug References: 1179999,1189641 CVE References: CVE-2020-35459 JIRA References: Sources used: SUSE Linux Enterprise High Availability 12-SP5 (src): crmsh-4.1.1+git.1630047134.803a70f2-2.65.1 SUSE Linux Enterprise High Availability 12-SP4 (src): crmsh-4.1.1+git.1630047134.803a70f2-2.65.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
clean up the stale state
Still missing submissions for: - SUSE:SLE-12-SP2:Update/hawk2 - SUSE:SLE-12-SP2:Update/crmsh - SUSE:SLE-12-SP2:Update/crmsh @Roger, please _do not_ close security-related issues, instead reassign them back to security-team@suse.de.
The decision of not backporting this to 12-SP2 was made in agreement with PM giving we were really close to the EOL of this service pack. What are the reasons to revisit and ask for that again?
So, we can close this issue. Thanks to everybody.