SUSE-SU-2021:0631-1
Security update for salt
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow extra_filerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) - virt: search for grub.xen path - Xen spicevmc, DNS SRV records backports: Fix virtual network generated DNS XML for SRV records Don't add spicevmc channel to xen VMs - virt UEFI fix: virt.update when efi=True
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt, python3-salt, salt und 12 weitere | 3000-24.1 |
Alle 15 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | python3-salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-api | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-bash-completion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-cloud | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-doc | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-fish-completion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-master | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-minion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-proxy | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-ssh | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-standalone-formulas-configuration | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-syndic | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-zsh-completion | 3000-24.1 |
Referenzen
- https://bugzilla.suse.com/1181550
- https://bugzilla.suse.com/1181556
- https://bugzilla.suse.com/1181557
- https://bugzilla.suse.com/1181558
- https://bugzilla.suse.com/1181559
- https://bugzilla.suse.com/1181560
- https://bugzilla.suse.com/1181561
- https://bugzilla.suse.com/1181562
Alle 25 Referenzen
- https://bugzilla.suse.com/1181563
- https://bugzilla.suse.com/1181564
- https://bugzilla.suse.com/1181565
- https://bugzilla.suse.com/1182740
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html
- https://www.suse.com/security/cve/CVE-2020-28243/
- https://www.suse.com/security/cve/CVE-2020-28972/
- https://www.suse.com/security/cve/CVE-2020-35662/
- https://www.suse.com/security/cve/CVE-2021-25281/
- https://www.suse.com/security/cve/CVE-2021-25282/
- https://www.suse.com/security/cve/CVE-2021-25283/
- https://www.suse.com/security/cve/CVE-2021-25284/
- https://www.suse.com/security/cve/CVE-2021-3144/
- https://www.suse.com/security/cve/CVE-2021-3148/
- https://www.suse.com/security/cve/CVE-2021-3197/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20210631-1/