SUSE-SU-2021:0631-1
Security update for salt
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow extra_filerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) - virt: search for grub.xen path - Xen spicevmc, DNS SRV records backports: Fix virtual network generated DNS XML for SRV records Don't add spicevmc channel to xen VMs - virt UEFI fix: virt.update when efi=True
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt, python3-salt, salt et 12 autres | 3000-24.1 |
Afficher les 15 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | python3-salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-api | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-bash-completion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-cloud | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-doc | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-fish-completion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-master | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-minion | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-proxy | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-ssh | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-standalone-formulas-configuration | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-syndic | 3000-24.1 |
| SUSE Linux Enterprise 15.1 | salt-zsh-completion | 3000-24.1 |
Références
- https://bugzilla.suse.com/1181550
- https://bugzilla.suse.com/1181556
- https://bugzilla.suse.com/1181557
- https://bugzilla.suse.com/1181558
- https://bugzilla.suse.com/1181559
- https://bugzilla.suse.com/1181560
- https://bugzilla.suse.com/1181561
- https://bugzilla.suse.com/1181562
Les 25 références
- https://bugzilla.suse.com/1181563
- https://bugzilla.suse.com/1181564
- https://bugzilla.suse.com/1181565
- https://bugzilla.suse.com/1182740
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html
- https://www.suse.com/security/cve/CVE-2020-28243/
- https://www.suse.com/security/cve/CVE-2020-28972/
- https://www.suse.com/security/cve/CVE-2020-35662/
- https://www.suse.com/security/cve/CVE-2021-25281/
- https://www.suse.com/security/cve/CVE-2021-25282/
- https://www.suse.com/security/cve/CVE-2021-25283/
- https://www.suse.com/security/cve/CVE-2021-25284/
- https://www.suse.com/security/cve/CVE-2021-3144/
- https://www.suse.com/security/cve/CVE-2021-3148/
- https://www.suse.com/security/cve/CVE-2021-3197/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20210631-1/