SUSE-SU-2022:2583-1

Details

This update for aws-iam-authenticator fixes the following issues:

CVE-2022-2385: Fixed AccessKeyID validation bypass (bsc#1201395).

Affected Packages

aws-iam-authenticator

SUSE Linux Enterprise Module for Public Cloud 15SUSE Linux Enterprise Module for Public Cloud 15 SP1SUSE Linux Enterprise Module for Public Cloud 15 SP2SUSE Linux Enterprise Module for Public Cloud 15 SP3SUSE Linux Enterprise Module for Public Cloud 15 SP4

Fixed in:

0.5.3-150000.1.9.1

References

REPORT

https://bugzilla.suse.com/1201395

WEB

https://www.suse.com/security/cve/CVE-2022-2385

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20222583-1/