Oval Definition:oval:org.opensuse.security:def:110291
Revision Date:2020-11-07Version:1
Title:Security update for salt (Critical)
Description:

This update for salt fixes the following issues:

- Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value. - Do not break package building for systemd OSes. - Drop wrong mock from chroot unit test. - Support systemd versions with dot. (bsc#1176294) - Fix for grains.test_core unit test. - Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024) - Several changes to virtualization: * Fix virt update when cpu and memory are changed. * Memory Tuning GSoC. * Properly fix memory setting regression in virt.update. * Expose libvirt on_reboot in virt states. - Support transactional systems (MicroOS). - zypperpkg module ignores retcode 104 for search(). (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future. (bsc#1176397) - Prevent import errors when running test_btrfs unit tests

This update was imported from the SUSE:SLE-15-SP1:Update update project.
Family:unixClass:patch
Status:Reference(s):1159670
1175987
1176024
1176294
1176397
1177867
1178319
1178361
1178362
1178485
CVE-2020-16846
CVE-2020-17490
CVE-2020-25592
openSUSE-SU-2020:1868-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • python2-salt-3000-lp151.5.30.1 is installed
  • OR python3-salt-3000-lp151.5.30.1 is installed
  • OR salt-3000-lp151.5.30.1 is installed
  • OR salt-api-3000-lp151.5.30.1 is installed
  • OR salt-bash-completion-3000-lp151.5.30.1 is installed
  • OR salt-cloud-3000-lp151.5.30.1 is installed
  • OR salt-doc-3000-lp151.5.30.1 is installed
  • OR salt-fish-completion-3000-lp151.5.30.1 is installed
  • OR salt-master-3000-lp151.5.30.1 is installed
  • OR salt-minion-3000-lp151.5.30.1 is installed
  • OR salt-proxy-3000-lp151.5.30.1 is installed
  • OR salt-ssh-3000-lp151.5.30.1 is installed
  • OR salt-standalone-formulas-configuration-3000-lp151.5.30.1 is installed
  • OR salt-syndic-3000-lp151.5.30.1 is installed
  • OR salt-zsh-completion-3000-lp151.5.30.1 is installed
  • BACK