SUSE-SU-2020:1150-1
Security update for salt
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt, python3-salt, salt and 12 more | 2019.2.0-6.27.1 |
Show all 15 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | python2-salt | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | python3-salt | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-api | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-bash-completion | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-cloud | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-doc | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-fish-completion | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-master | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-minion | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-proxy | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-ssh | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-standalone-formulas-configuration | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-syndic | 2019.2.0-6.27.1 |
| SUSE Linux Enterprise 15.1 | salt-zsh-completion | 2019.2.0-6.27.1 |
References
- https://bugzilla.suse.com/1170595
- https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html
- https://www.suse.com/security/cve/CVE-2020-11651/
- https://www.suse.com/security/cve/CVE-2020-11652/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2020/suse-su-20201150-1/