openSUSE-SU-2018:4174-1
Security update for salt
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938) - Fixed OS arch detection when RPM is not installed (bsc#1114197) - Crontab module fix: file attributes option missing (bsc#1114824) - Fix git_pillar merging across multiple __env__ repositories (bsc#1112874) This update was imported from the SUSE:SLE-15:Update update project.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt, python3-salt, salt und 11 weitere | 2018.3.0-lp150.3.17.1 |
Alle 14 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | python3-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-api | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-bash-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-cloud | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-doc | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-fish-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-master | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-minion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-proxy | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-ssh | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-syndic | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-zsh-completion | 2018.3.0-lp150.3.17.1 |