SUSE-SU-2021:14650-1
Security update for salt
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 11.3 | salt, salt-doc, salt-minion | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.4 | salt, salt-doc, salt-minion | 2016.11.10-43.69.1 |
Mostrar las 6 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 11.3 | salt | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.3 | salt-doc | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.3 | salt-minion | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.4 | salt | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.4 | salt-doc | 2016.11.10-43.69.1 |
| SUSE Linux Enterprise 11.4 | salt-minion | 2016.11.10-43.69.1 |
Referencias
- https://bugzilla.suse.com/1181550
- https://bugzilla.suse.com/1181556
- https://bugzilla.suse.com/1181557
- https://bugzilla.suse.com/1181558
- https://bugzilla.suse.com/1181559
- https://bugzilla.suse.com/1181560
- https://bugzilla.suse.com/1181561
- https://bugzilla.suse.com/1181562
Las 25 referencias
- https://bugzilla.suse.com/1181563
- https://bugzilla.suse.com/1181564
- https://bugzilla.suse.com/1181565
- https://bugzilla.suse.com/1182740
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008380.html
- https://www.suse.com/security/cve/CVE-2020-28243/
- https://www.suse.com/security/cve/CVE-2020-28972/
- https://www.suse.com/security/cve/CVE-2020-35662/
- https://www.suse.com/security/cve/CVE-2021-25281/
- https://www.suse.com/security/cve/CVE-2021-25282/
- https://www.suse.com/security/cve/CVE-2021-25283/
- https://www.suse.com/security/cve/CVE-2021-25284/
- https://www.suse.com/security/cve/CVE-2021-3144/
- https://www.suse.com/security/cve/CVE-2021-3148/
- https://www.suse.com/security/cve/CVE-2021-3197/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-202114650-1/