SUSE-SU-2020:1147-1
Security update for salt
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | python2-salt, salt, salt-api and 10 more | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12.2 | python2-salt, salt, salt-minion | 2019.2.0-46.91.1 |
Show all 16 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | python2-salt | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-api | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-bash-completion | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-cloud | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-doc | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-master | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-minion | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-proxy | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-ssh | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-standalone-formulas-configuration | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-syndic | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12 | salt-zsh-completion | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12.2 | python2-salt | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12.2 | salt | 2019.2.0-46.91.1 |
| SUSE Linux Enterprise 12.2 | salt-minion | 2019.2.0-46.91.1 |
References
- https://bugzilla.suse.com/1170595
- https://lists.suse.com/pipermail/sle-security-updates/2020-April/006764.html
- https://www.suse.com/security/cve/CVE-2020-11651/
- https://www.suse.com/security/cve/CVE-2020-11652/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2020/suse-su-20201147-1/