setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade setup | Apr 27, 2020 | Jul 3, 2018 |
| Centos_linux | — | Upgrade setup | Aug 28, 2019 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade setup | Dec 31, 2018 | Jul 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade setup | Dec 11, 2018 | Jul 2, 2018 |
| Oracle_linux | — | Upgrade setup | Nov 6, 2018 | Apr 24, 2018 |
| Redhat_linux | — | No solution existsUpgrade setup | Oct 31, 2018 | Jul 2, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub