! Home Assistant - Supervisor Security Disclosure !

[m4v3r1ck]

Disclosure: Supervisor security vulnerability

Disclosure of a security vulnerability found impacting installations using the Home Assistant Supervisor.

www.home-assistant.io

 

[m4v3r1ck]

Patched!

 

[Eddie the Eagle]

Ik draai HA zelf nog op 2022.12.4 maar het gaat hier specifiek om de Supervisor zie ik.

 

[m4v3r1ck]

Ik draai HA zelf nog op 2022.12.4 maar het gaat hier specifiek om de Supervisor zie ik.

Bekijk bijlage 7420

Klopt helemaal Eddy!

We were made aware of a security issue impacting installations using the Home Assistant Supervisor. A fix for this security issue has been rolled out to all affected Home Assistant users via the Supervisor auto-update system and this issue is no longer present.

 

[m4v3r1ck]

Aanvullende informatie ipv bovenstaande quote:

Affected version​

The security issue affected installation types Home Assistant OS and Home Assistant Supervised. This includes installations running on the Home Assistant Blue and Home Assistant Yellow.

The two other installation types, Home Assistant Container (Docker) and Home Assistant Core (own Python environment), have not been affected.