Oval Definition:oval:org.opensuse.security:def:5533
Revision Date:2020-12-02Version:1
Title:Security update for Salt (Critical)
Description:



This update fixes the following issues:

salt:

- Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value - Do not break package building for systemd OSes - Drop wrong mock from chroot unit test - Support systemd versions with dot (bsc#1176294) - Fix for grains.test_core unit test - Fix file/directory user and group ownership containing UTF-8 characters (bsc#1176024) - Several changes to virtualization: - Fix virt update when cpu and memory are changed - Memory Tuning GSoC - Properly fix memory setting regression in virt.update - Expose libvirt on_reboot in virt states - Support transactional systems (MicroOS) - Zypperpkg module ignores retcode 104 for search() (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future (bsc#1176397) - Prevent import errors when running test_btrfs unit tests

Family:unixClass:patch
Status:Reference(s):1159670
1164692
1164825
1164860
1175987
1176024
1176294
1176397
1177867
1178319
1178361
1178362
1178485
CVE-2008-5984
CVE-2011-1145
CVE-2011-3200
CVE-2011-4182
CVE-2012-1152
CVE-2013-2063
CVE-2013-2139
CVE-2013-4238
CVE-2013-4758
CVE-2013-6369
CVE-2013-6370
CVE-2013-6371
CVE-2013-6393
CVE-2013-6487
CVE-2014-2524
CVE-2014-2525
CVE-2014-3634
CVE-2014-3634
CVE-2014-3683
CVE-2014-3775
CVE-2014-6271
CVE-2014-6277
CVE-2014-6278
CVE-2014-7169
CVE-2014-7186
CVE-2014-7187
CVE-2014-9130
CVE-2015-5185
CVE-2019-17569
CVE-2020-16846
CVE-2020-17490
CVE-2020-1935
CVE-2020-1938
CVE-2020-25592
SUSE-SU-2020:0598-1
SUSE-SU-2020:3244-1
Platform(s):openSUSE 13.1
openSUSE 13.1 NonFree
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for High Performance Computing 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2
SUSE Linux Enterprise Real Time Extension 11 SP3
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND Package Information
  • openstack-neutron-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-dhcp-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-ha-tool-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-l3-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-lbaas-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-metadata-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-metering-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-openvswitch-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-neutron-vpn-agent-2014.2.4~a0~dev103-10.3 is installed
  • OR openstack-nova-2014.2.4~a0~dev80-14.1 is installed
  • OR openstack-nova-compute-2014.2.4~a0~dev80-14.1 is installed
  • OR python-neutron-2014.2.4~a0~dev103-10.3 is installed
  • OR python-nova-2014.2.4~a0~dev80-14.1 is installed
  • OR python-python-memcached-1.54-2.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • flash-player-11.2.202.481-0.8.2 is installed
  • OR flash-player-gnome-11.2.202.481-0.8.2 is installed
  • OR flash-player-kde4-11.2.202.481-0.8.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • python-2.7.9-20 is installed
  • OR python-curses-2.7.9-20 is installed
  • OR python-tk-2.7.9-20 is installed
  • OR python3-3.4.1-12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • bash-4.3-78 is installed
  • OR bash-doc-4.3-78 is installed
  • OR bash-lang-4.3-78 is installed
  • OR libreadline6-6.3-78 is installed
  • OR libreadline6-32bit-6.3-78 is installed
  • OR readline-doc-6.3-78 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND bogofilter-1.2.4-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND cifs-utils-6.5-9.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 is installed
  • AND Package Information
  • compat-libldap-2_3-0-2.3.37-16.1 is installed
  • OR openldap2-2.4.39-16.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • bind-9.9.9P1-62.1 is installed
  • OR bind-chrootenv-9.9.9P1-62.1 is installed
  • OR bind-devel-9.9.9P1-62.1 is installed
  • OR bind-doc-9.9.9P1-62.1 is installed
  • OR bind-libs-9.9.9P1-62.1 is installed
  • OR bind-libs-32bit-9.9.9P1-62.1 is installed
  • OR bind-utils-9.9.9P1-62.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND coolkey-1.1.0-148.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND sles12sp1-docker-image-1.0.7-20171002 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 12 is installed
  • AND Package Information
  • libpmi0-17.02.9-6.10 is installed
  • OR libslurm29-16.05.8.1-6 is installed
  • OR libslurm31-17.02.9-6.10 is installed
  • OR pdsh-2.33-7.5 is installed
  • OR perl-slurm-17.02.9-6.10 is installed
  • OR slurm-17.02.9-6.10 is installed
  • OR slurm-auth-none-17.02.9-6.10 is installed
  • OR slurm-devel-17.02.9-6.10 is installed
  • OR slurm-doc-17.02.9-6.10 is installed
  • OR slurm-lua-17.02.9-6.10 is installed
  • OR slurm-munge-17.02.9-6.10 is installed
  • OR slurm-pam_slurm-17.02.9-6.10 is installed
  • OR slurm-plugins-17.02.9-6.10 is installed
  • OR slurm-sched-wiki-17.02.9-6.10 is installed
  • OR slurm-slurmdb-direct-17.02.9-6.10 is installed
  • OR slurm-slurmdbd-17.02.9-6.10 is installed
  • OR slurm-sql-17.02.9-6.10 is installed
  • OR slurm-torque-17.02.9-6.10 is installed
  • OR slurmlibs-16.05.8.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • libopenssl0_9_8-0.9.8j-59 is installed
  • OR libopenssl0_9_8-32bit-0.9.8j-59 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.38-44.1 is installed
  • OR kernel-ec2-devel-3.12.38-44.1 is installed
  • OR kernel-ec2-extra-3.12.38-44.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND python3-3.4.1-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Point of Sale 12 SP2 is installed
  • AND Package Information
  • salt-2016.11.4-46.10.1 is installed
  • OR salt-minion-2016.11.4-46.10.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Real Time Extension 11 SP3 is installed
  • AND Package Information
  • kernel-rt-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-rt-base-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-rt-devel-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-rt_trace-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-rt_trace-base-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-rt_trace-devel-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-source-rt-3.0.101.rt130-0.33.44.2 is installed
  • OR kernel-syms-rt-3.0.101.rt130-0.33.44.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND Package Information
  • ntp-4.2.4p8-1.29.32.1 is installed
  • OR ntp-doc-4.2.4p8-1.29.32.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND acpid-1.0.6-91.16.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2-LTSS is installed
  • AND Package Information
  • dhcp-4.2.4.P2-0.11.15.1 is installed
  • OR dhcp-client-4.2.4.P2-0.11.15.1 is installed
  • OR dhcp-relay-4.2.4.P2-0.11.15.1 is installed
  • OR dhcp-server-4.2.4.P2-0.11.15.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • bind-9.6ESVR7P4-0.10.1 is installed
  • OR bind-chrootenv-9.6ESVR7P4-0.10.1 is installed
  • OR bind-doc-9.6ESVR7P4-0.10.1 is installed
  • OR bind-libs-9.6ESVR7P4-0.10.1 is installed
  • OR bind-libs-32bit-9.6ESVR7P4-0.10.1 is installed
  • OR bind-libs-x86-9.6ESVR7P4-0.10.1 is installed
  • OR bind-utils-9.6ESVR7P4-0.10.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • OpenEXR-1.6.1-83.17.1 is installed
  • OR OpenEXR-32bit-1.6.1-83.17.1 is installed
  • OR OpenEXR-x86-1.6.1-83.17.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND apache2-mod_nss-1.0.8-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • accountsservice-0.6.35-3 is installed
  • OR accountsservice-lang-0.6.35-3 is installed
  • OR libaccountsservice0-0.6.35-3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND binutils-2.26.1-9.12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND rtkit-0.11_git201205151338-8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • apache2-2.4.23-29.24 is installed
  • OR apache2-doc-2.4.23-29.24 is installed
  • OR apache2-example-pages-2.4.23-29.24 is installed
  • OR apache2-prefork-2.4.23-29.24 is installed
  • OR apache2-utils-2.4.23-29.24 is installed
  • OR apache2-worker-2.4.23-29.24 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • MozillaFirefox-45.4.0esr-81 is installed
  • OR MozillaFirefox-translations-45.4.0esr-81 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed
  • AND Package Information
  • xen-4.5.5_16-22.28 is installed
  • OR xen-doc-html-4.5.5_16-22.28 is installed
  • OR xen-kmp-default-4.5.5_16_k3.12.74_60.64.57-22.28 is installed
  • OR xen-libs-4.5.5_16-22.28 is installed
  • OR xen-libs-32bit-4.5.5_16-22.28 is installed
  • OR xen-tools-4.5.5_16-22.28 is installed
  • OR xen-tools-domU-4.5.5_16-22.28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • python2-salt-3000-5.91 is installed
  • OR python3-salt-3000-5.91 is installed
  • OR salt-3000-5.91 is installed
  • OR salt-api-3000-5.91 is installed
  • OR salt-bash-completion-3000-5.91 is installed
  • OR salt-cloud-3000-5.91 is installed
  • OR salt-doc-3000-5.91 is installed
  • OR salt-fish-completion-3000-5.91 is installed
  • OR salt-master-3000-5.91 is installed
  • OR salt-minion-3000-5.91 is installed
  • OR salt-proxy-3000-5.91 is installed
  • OR salt-ssh-3000-5.91 is installed
  • OR salt-standalone-formulas-configuration-3000-5.91 is installed
  • OR salt-syndic-3000-5.91 is installed
  • OR salt-zsh-completion-3000-5.91 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.26.1 is installed
  • OR ImageMagick-devel-6.4.3.6-7.26.1 is installed
  • OR libMagick++-devel-6.4.3.6-7.26.1 is installed
  • OR libMagick++1-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-32bit-6.4.3.6-7.26.1 is installed
  • OR perl-PerlMagick-6.4.3.6-7.26.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND libexif-devel-0.6.17-2.14.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND augeas-devel-1.2.0-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND Package Information
  • bash-devel-4.2-75 is installed
  • OR readline-devel-6.2-75 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND mpfr-devel-3.1.2-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND Package Information
  • DirectFB-devel-1.7.1-6 is installed
  • OR lib++dfb-devel-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND argyllcms-1.6.3-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • dia-0.97.2-13 is installed
  • OR dia-lang-0.97.2-13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-33 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-33 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed
    • BACK