SUSE-SU-2018:1757-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1757-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2018:1757-1
- Related
- Published
- 2018-06-19T13:32:11Z
- Modified
- 2018-06-19T13:32:11Z
- Summary
- Security update for salt
- Details
-
This update for salt provides version 2018.3 and brings many fixes and improvements:
- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Prevent zypper from parsing repo configuration from not .repo files (bsc#1094055)
- Collect all versions of installed packages on SUSE and RHEL systems (bsc#1089526)
- No more AWS EC2 rate limitations in salt-cloud. (bsc#1088888)
- MySQL returner now also allows to use Unix sockets. (bsc#1091371)
- Do not override jid on returners, only sending back to master. (bsc#1092373)
- Remove minion/thin/version if exists to force thin regeneration. (bsc#1092161)
- Fix minion scheduler to return a 'retcode' attribute. (bsc#1089112)
- Fix for logging during network interface querying. (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute. (bsc#1087055)
- Fix patchinstall on yum module. Bad comparison. (bsc#1087278)
- Strip trailing commas on Linux user's GECOS fields. (bsc#1089362)
- Fallback to PyMySQL. (bsc#1087891)
- Fix for [Errno 0] Resolver Error 0 (no error). (bsc#1087581)
- Add python-2.6 support to salt-ssh.
- Make it possible to use docker login, pull and push from module.run and detect errors.
- Fix unicode decode error with salt-ssh.
- Fix cp.push empty file. (bsc#1075950)
- Fix grains containing trailing '\n'.
- Remove salt-minion python2 requirement when python3 is default. (bsc#1081592)
- Restoring installation of packages for Rhel 6 and 7.
- Prevent queryformat pattern from expanding. (bsc#1079048)
- Fix for delete_deployment in Kubernetes module. (bsc#1059291)
- Fix bsc#1062464 and CVE-2017-14696 already included in 2017.7.2.
- Fix wrong version reported by Salt. (bsc#1061407)
- Run salt-api as user salt. (bsc#1064520)
For a detailed description, please refer to the upstream-changelog at https://docs.saltstack.com/en/latest/topics/releases/index.html or to the rpm-changelog.
supportutils-plugin-salt:
- Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242)
- References
-
- https://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/
- https://bugzilla.suse.com/1059291
- https://bugzilla.suse.com/1061407
- https://bugzilla.suse.com/1062464
- https://bugzilla.suse.com/1064520
- https://bugzilla.suse.com/1075950
- https://bugzilla.suse.com/1079048
- https://bugzilla.suse.com/1081592
- https://bugzilla.suse.com/1087055
- https://bugzilla.suse.com/1087278
- https://bugzilla.suse.com/1087581
- https://bugzilla.suse.com/1087891
- https://bugzilla.suse.com/1088888
- https://bugzilla.suse.com/1089112
- https://bugzilla.suse.com/1089362
- https://bugzilla.suse.com/1089526
- https://bugzilla.suse.com/1090242
- https://bugzilla.suse.com/1091371
- https://bugzilla.suse.com/1092161
- https://bugzilla.suse.com/1092373
- https://bugzilla.suse.com/1094055
- https://bugzilla.suse.com/1097174
- https://bugzilla.suse.com/1097413
- https://www.suse.com/security/cve/CVE-2017-14695
- https://www.suse.com/security/cve/CVE-2017-14696
Affected packages
SUSE:Manager Tools 12 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Manager%20Tools%2012
SUSE:Manager Tools 12 / supportutils-plugin-salt
Package
- Name
- supportutils-plugin-salt
- Purl
- purl:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Tools%2012
SUSE:Linux Enterprise Module for Advanced Systems Management 12 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2018.3.0-46.28.1
Ecosystem specific
{
"binaries": [
{
"salt-zsh-completion": "2018.3.0-46.28.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt-cloud": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1"
}
]
}
SUSE:Linux Enterprise Point of Sale 12 SP2 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2012%20SP2
SUSE:Manager Proxy 3.0 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Manager%20Proxy%203.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2018.3.0-46.28.1
Ecosystem specific
{
"binaries": [
{
"salt-zsh-completion": "2018.3.0-46.28.1",
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1"
}
]
}
SUSE:Manager Proxy 3.0 / supportutils-plugin-salt
Package
- Name
- supportutils-plugin-salt
- Purl
- purl:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Proxy%203.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.1.4-6.9.1
Ecosystem specific
{
"binaries": [
{
"salt-zsh-completion": "2018.3.0-46.28.1",
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1"
}
]
}
SUSE:Manager Proxy 3.1 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Manager%20Proxy%203.1
SUSE:Manager Proxy 3.1 / supportutils-plugin-salt
Package
- Name
- supportutils-plugin-salt
- Purl
- purl:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Proxy%203.1
SUSE:Manager Server 3.0 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Manager%20Server%203.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2018.3.0-46.28.1
Ecosystem specific
{
"binaries": [
{
"salt-zsh-completion": "2018.3.0-46.28.1",
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1"
}
]
}
SUSE:Manager Server 3.0 / supportutils-plugin-salt
Package
- Name
- supportutils-plugin-salt
- Purl
- purl:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Server%203.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.1.4-6.9.1
Ecosystem specific
{
"binaries": [
{
"salt-zsh-completion": "2018.3.0-46.28.1",
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1"
}
]
}
SUSE:Manager Server 3.1 / salt
Package
- Name
- salt
- Purl
- purl:rpm/suse/salt&distro=SUSE%20Manager%20Server%203.1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2018.3.0-46.28.1
Ecosystem specific
{
"binaries": [
{
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt-cloud": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"python3-salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-zsh-completion": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1"
}
]
}
SUSE:Manager Server 3.1 / supportutils-plugin-salt
Package
- Name
- supportutils-plugin-salt
- Purl
- purl:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Server%203.1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.1.4-6.9.1
Ecosystem specific
{
"binaries": [
{
"supportutils-plugin-salt": "1.1.4-6.9.1",
"salt-bash-completion": "2018.3.0-46.28.1",
"salt-cloud": "2018.3.0-46.28.1",
"salt": "2018.3.0-46.28.1",
"python3-salt": "2018.3.0-46.28.1",
"salt-ssh": "2018.3.0-46.28.1",
"salt-proxy": "2018.3.0-46.28.1",
"salt-zsh-completion": "2018.3.0-46.28.1",
"salt-syndic": "2018.3.0-46.28.1",
"salt-master": "2018.3.0-46.28.1",
"python2-salt": "2018.3.0-46.28.1",
"salt-api": "2018.3.0-46.28.1",
"salt-minion": "2018.3.0-46.28.1",
"salt-doc": "2018.3.0-46.28.1"
}
]
}