SUSE-SU-2021:0627-1
Security update for salt
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) - virt: search for `grub.xen` path - Xen spicevmc, DNS SRV records backports: - Fix virtual network generated DNS XML for SRV records - Don't add spicevmc channel to xen VMs - virt UEFI fix: virt.update when `efi=True`
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | python2-salt, salt, salt-api und 10 weitere | 3000-46.129.1 |
| SUSE Linux Enterprise 12.2 | python2-salt, salt, salt-minion | 3000-46.129.1 |
Alle 16 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | python2-salt | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-api | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-bash-completion | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-cloud | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-doc | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-master | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-minion | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-proxy | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-ssh | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-standalone-formulas-configuration | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-syndic | 3000-46.129.1 |
| SUSE Linux Enterprise 12 | salt-zsh-completion | 3000-46.129.1 |
| SUSE Linux Enterprise 12.2 | python2-salt | 3000-46.129.1 |
| SUSE Linux Enterprise 12.2 | salt | 3000-46.129.1 |
| SUSE Linux Enterprise 12.2 | salt-minion | 3000-46.129.1 |
Referenzen
- https://bugzilla.suse.com/1181550
- https://bugzilla.suse.com/1181556
- https://bugzilla.suse.com/1181557
- https://bugzilla.suse.com/1181558
- https://bugzilla.suse.com/1181559
- https://bugzilla.suse.com/1181560
- https://bugzilla.suse.com/1181561
- https://bugzilla.suse.com/1181562
Alle 25 Referenzen
- https://bugzilla.suse.com/1181563
- https://bugzilla.suse.com/1181564
- https://bugzilla.suse.com/1181565
- https://bugzilla.suse.com/1182740
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008390.html
- https://www.suse.com/security/cve/CVE-2020-28243/
- https://www.suse.com/security/cve/CVE-2020-28972/
- https://www.suse.com/security/cve/CVE-2020-35662/
- https://www.suse.com/security/cve/CVE-2021-25281/
- https://www.suse.com/security/cve/CVE-2021-25282/
- https://www.suse.com/security/cve/CVE-2021-25283/
- https://www.suse.com/security/cve/CVE-2021-25284/
- https://www.suse.com/security/cve/CVE-2021-3144/
- https://www.suse.com/security/cve/CVE-2021-3148/
- https://www.suse.com/security/cve/CVE-2021-3197/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20210627-1/