Critical Bug in pam authentication in Solaris 10, 11 and Illumos

[gea]

There is a critical bug in Solaris 10, 11 and Illumos allowing remote access

https://github.com/omniosorg/omnios-build/blob/r151030/doc/ReleaseNotes.md

omnios-build/doc/ReleaseNotes.md at r151034 · omniosorg/omnios-build

Build system for OmniOS. Contribute to omniosorg/omnios-build development by creating an account on GitHub.

github.com

Please update!

 

[dswartz]

Whoops!

 

[gea]

Bug was in Sun/Oracle Solaris/ OpenSolaris for many many years, undetected.
If security agencies would be aware, Edward Snowden would have propably published.

https://www.oracle.com/security-alerts/cpuoct2020.html#AppendixSUNS

More important:
Bug published yesterday in the Illumos dev list,
fix available within hours in all OmniOS releases under maintenance.

Topicbox