openSUSE-SU-2018:4174-1
Security update for salt
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938) - Fixed OS arch detection when RPM is not installed (bsc#1114197) - Crontab module fix: file attributes option missing (bsc#1114824) - Fix git_pillar merging across multiple __env__ repositories (bsc#1112874) This update was imported from the SUSE:SLE-15:Update update project.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt, python3-salt, salt et 11 autres | 2018.3.0-lp150.3.17.1 |
Afficher les 14 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | python3-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-api | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-bash-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-cloud | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-doc | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-fish-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-master | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-minion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-proxy | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-ssh | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-syndic | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-zsh-completion | 2018.3.0-lp150.3.17.1 |