openSUSE-SU-2020:1833-1
Security update for salt
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value. - Do not break package building for systemd OSes. - Drop wrong mock from chroot unit test. - Support systemd versions with dot. (bsc#1176294) - Fix for grains.test_core unit test. - Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024) - Several changes to virtualization: * Fix virt update when cpu and memory are changed. * Memory Tuning GSoC. * Properly fix memory setting regression in virt.update. * Expose libvirt on_reboot in virt states. - Support transactional systems (MicroOS). - zypperpkg module ignores retcode 104 for search(). (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future. (bsc#1176397) - Prevent import errors when running test_btrfs unit tests. This update was imported from the SUSE:SLE-15-SP2:Update update project.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.2 | python2-salt, python3-salt, salt et 12 autres | 3000-lp152.3.15.1 |
Afficher les 15 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.2 | python2-salt | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | python3-salt | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-api | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-bash-completion | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-cloud | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-doc | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-fish-completion | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-master | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-minion | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-proxy | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-ssh | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-standalone-formulas-configuration | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-syndic | 3000-lp152.3.15.1 |
| openSUSE Leap 15.2 | salt-zsh-completion | 3000-lp152.3.15.1 |
Références
- https://bugzilla.suse.com/1159670
- https://bugzilla.suse.com/1175987
- https://bugzilla.suse.com/1176024
- https://bugzilla.suse.com/1176294
- https://bugzilla.suse.com/1176397
- https://bugzilla.suse.com/1177867
- https://bugzilla.suse.com/1178319
- https://bugzilla.suse.com/1178361
Les 14 références
- https://bugzilla.suse.com/1178362
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2W22H3YLCTB3S3UBN7YRWYRBMUPL5V5B/
- https://www.suse.com/security/cve/CVE-2020-16846/
- https://www.suse.com/security/cve/CVE-2020-17490/
- https://www.suse.com/security/cve/CVE-2020-25592/
- https://www.suse.com/support/security/rating/