openSUSE-SU-2018:4174-1
Security update for salt
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938) - Fixed OS arch detection when RPM is not installed (bsc#1114197) - Crontab module fix: file attributes option missing (bsc#1114824) - Fix git_pillar merging across multiple __env__ repositories (bsc#1112874) This update was imported from the SUSE:SLE-15:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt, python3-salt, salt y 11 más | 2018.3.0-lp150.3.17.1 |
Mostrar las 14 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | python3-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-api | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-bash-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-cloud | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-doc | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-fish-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-master | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-minion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-proxy | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-ssh | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-syndic | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-zsh-completion | 2018.3.0-lp150.3.17.1 |