Summary: | <app-admin/vault-1.10.3: incorrect MFA enforcement after server restart | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | zmedico |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://discuss.hashicorp.com/t/hcsec-2022-12-vault-s-login-mfa-configuration-and-enforcement-not-reloaded-after-restart/39565 | ||
Whiteboard: | B4 [glsa+] | ||
Package list: | Runtime testing required: | --- |
Description
John Helmert III
2022-05-18 17:52:31 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=df47e59c71eaa1415bc762c894a681a72303ae61 commit df47e59c71eaa1415bc762c894a681a72303ae61 Author: Zac Medico <zmedico@gentoo.org> AuthorDate: 2022-05-20 01:50:58 +0000 Commit: Zac Medico <zmedico@gentoo.org> CommitDate: 2022-05-20 01:51:58 +0000 app-admin/vault: drop 1.10.0, 1.10.1, 1.10.2 Bug: https://bugs.gentoo.org/845405 Signed-off-by: Zac Medico <zmedico@gentoo.org> app-admin/vault/Manifest | 6 --- app-admin/vault/vault-1.10.0.ebuild | 85 ------------------------------------- app-admin/vault/vault-1.10.1.ebuild | 85 ------------------------------------- app-admin/vault/vault-1.10.2.ebuild | 85 ------------------------------------- 4 files changed, 261 deletions(-) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e4a4e103b3f63847aa7b253d09a658ea3b054979 commit e4a4e103b3f63847aa7b253d09a658ea3b054979 Author: Zac Medico <zmedico@gentoo.org> AuthorDate: 2022-05-20 01:50:25 +0000 Commit: Zac Medico <zmedico@gentoo.org> CommitDate: 2022-05-20 01:51:58 +0000 app-admin/vault: stabilize 1.10.3 for amd64 Bug: https://bugs.gentoo.org/845405 Signed-off-by: Zac Medico <zmedico@gentoo.org> app-admin/vault/vault-1.10.3.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Thanks! The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/glsa.git/commit/?id=254c716d0dd35a6846f281fd4a3eaf970dc0bede commit 254c716d0dd35a6846f281fd4a3eaf970dc0bede Author: GLSAMaker <glsamaker@gentoo.org> AuthorDate: 2022-07-29 21:22:59 +0000 Commit: John Helmert III <ajak@gentoo.org> CommitDate: 2022-08-01 18:05:08 +0000 [ GLSA-202207-01 ] HashiCorp Vault: Multiple Vulnerabilities Bug: https://bugs.gentoo.org/768312 Bug: https://bugs.gentoo.org/797244 Bug: https://bugs.gentoo.org/808093 Bug: https://bugs.gentoo.org/817269 Bug: https://bugs.gentoo.org/827945 Bug: https://bugs.gentoo.org/829493 Bug: https://bugs.gentoo.org/835070 Bug: https://bugs.gentoo.org/845405 Signed-off-by: GLSAMaker <glsamaker@gentoo.org> Signed-off-by: John Helmert III <ajak@gentoo.org> glsa-202207-01.xml | 61 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 61 insertions(+) GLSA released, all done! |