SUSE-SU-2021:0628-1
Security update for salt
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) - virt: search for `grub.xen` path - Xen spicevmc, DNS SRV records backports: - Fix virtual network generated DNS XML for SRV records - Don't add spicevmc channel to xen VMs - virt UEFI fix: virt.update when `efi=True`
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | python2-salt, python3-salt, salt y 12 más | 3000-5.106.1 |
Mostrar las 15 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | python2-salt | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | python3-salt | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-api | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-bash-completion | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-cloud | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-doc | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-fish-completion | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-master | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-minion | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-proxy | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-ssh | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-standalone-formulas-configuration | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-syndic | 3000-5.106.1 |
| SUSE Linux Enterprise 15 | salt-zsh-completion | 3000-5.106.1 |
Referencias
- https://bugzilla.suse.com/1181550
- https://bugzilla.suse.com/1181556
- https://bugzilla.suse.com/1181557
- https://bugzilla.suse.com/1181558
- https://bugzilla.suse.com/1181559
- https://bugzilla.suse.com/1181560
- https://bugzilla.suse.com/1181561
- https://bugzilla.suse.com/1181562
Las 25 referencias
- https://bugzilla.suse.com/1181563
- https://bugzilla.suse.com/1181564
- https://bugzilla.suse.com/1181565
- https://bugzilla.suse.com/1182740
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008383.html
- https://www.suse.com/security/cve/CVE-2020-28243/
- https://www.suse.com/security/cve/CVE-2020-28972/
- https://www.suse.com/security/cve/CVE-2020-35662/
- https://www.suse.com/security/cve/CVE-2021-25281/
- https://www.suse.com/security/cve/CVE-2021-25282/
- https://www.suse.com/security/cve/CVE-2021-25283/
- https://www.suse.com/security/cve/CVE-2021-25284/
- https://www.suse.com/security/cve/CVE-2021-3144/
- https://www.suse.com/security/cve/CVE-2021-3148/
- https://www.suse.com/security/cve/CVE-2021-3197/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20210628-1/