Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:0251-1 Moderate: Aws-CLI Permission Issue Fix

suse
Calendar Grey January 28, 2020
Dist Suse Esm H88
SUSE Security Advisory for aws-cli addresses a medium-level authorization vulnerability. Contains remediation details and upgrade instructions.
An update that solves one vulnerability and has four fixes is now available

Summary

This update for aws-cli to version 1.16.297 fixes the following issues: Security issue fixed: - CVE-2018-15869: Fixed an permission handling issue where an unexpected AMI could potentially be used (bsc#1105988). Non-security issues fixed: - Fixed an issue with the CLI client, where a ModuleNotFoundError was triggered (bsc#1092493). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-251=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2020-251=1 - SUSE Linux Enterprise Module for Public Cloud 12:

Topics%20covered

Topics Covered

security advisory moderate permission issue SUSE OpenStack aws-cli

References

#1092493 #1105988 #1118021 #1118024 #1118099

Cross- CVE-2018-15869

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

SUSE Linux Enterprise Module for Public Cloud 12

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2018-15869.html

https://bugzilla.suse.com/1092493

https://bugzilla.suse.com/1105988

https://bugzilla.suse.com/1118021

https://bugzilla.suse.com/1118024

https://bugzilla.suse.com/1118099

Announcement ID: SUSE-SU-2020:0251-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate permission issue SUSE OpenStack aws-cli

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here