openSUSE-SU-2018:4174-1
Security update for salt
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938) - Fixed OS arch detection when RPM is not installed (bsc#1114197) - Crontab module fix: file attributes option missing (bsc#1114824) - Fix git_pillar merging across multiple __env__ repositories (bsc#1112874) This update was imported from the SUSE:SLE-15:Update update project.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt, python3-salt, salt ve 11 tane daha | 2018.3.0-lp150.3.17.1 |
1 kaynaktaki 14 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.0 | python2-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | python3-salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-api | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-bash-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-cloud | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-doc | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-fish-completion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-master | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-minion | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-proxy | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-ssh | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-syndic | 2018.3.0-lp150.3.17.1 |
| openSUSE Leap 15.0 | salt-zsh-completion | 2018.3.0-lp150.3.17.1 |