Oval Definition:oval:org.opensuse.security:def:67474
Revision Date:2020-12-01Version:1
Title:Security update for salt (Critical)
Description:

This update for salt fixes the following issues:

- Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value. - Do not break package building for systemd OSes. - Drop wrong mock from chroot unit test. - Support systemd versions with dot. (bsc#1176294) - Fix for grains.test_core unit test. - Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024) - Several changes to virtualization: * Fix virt update when cpu and memory are changed. * Memory Tuning GSoC. * Properly fix memory setting regression in virt.update. * Expose libvirt on_reboot in virt states. - Support transactional systems (MicroOS). - zypperpkg module ignores retcode 104 for search(). (bsc#1159670) - Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987) - Invalidate file list cache when cache file modified time is in the future. (bsc#1176397) - Prevent import errors when running test_btrfs unit tests.
Family:unixClass:patch
Status:Reference(s):1159670
1175987
1176024
1176294
1176397
1177867
1178319
1178361
1178362
CVE-2010-0405
CVE-2011-2721
CVE-2011-3627
CVE-2012-1457
CVE-2012-1458
CVE-2012-1459
CVE-2012-6706
CVE-2013-6497
CVE-2014-9328
CVE-2015-1461
CVE-2015-1462
CVE-2015-1463
CVE-2015-2170
CVE-2015-2221
CVE-2015-2222
CVE-2015-2305
CVE-2015-2668
CVE-2017-11423
CVE-2017-12374
CVE-2017-12375
CVE-2017-12376
CVE-2017-12377
CVE-2017-12378
CVE-2017-12379
CVE-2017-12380
CVE-2017-6418
CVE-2017-6419
CVE-2017-6420
CVE-2018-0202
CVE-2018-0360
CVE-2018-0361
CVE-2018-1000085
CVE-2018-14680
CVE-2018-14681
CVE-2018-14682
CVE-2018-15378
CVE-2019-1787
CVE-2019-1788
CVE-2019-1789
CVE-2020-16846
CVE-2020-17490
CVE-2020-25592
SUSE-SU-2020:3155-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • clamav-0.100.3-3.9 is installed
  • OR clamav-devel-0.100.3-3.9 is installed
  • OR libclamav7-0.100.3-3.9 is installed
  • OR libclammspack0-0.100.3-3.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND Package Information
  • salt-3000-4.20 is installed
  • OR salt-api-3000-4.20 is installed
  • OR salt-cloud-3000-4.20 is installed
  • OR salt-fish-completion-3000-4.20 is installed
  • OR salt-master-3000-4.20 is installed
  • OR salt-proxy-3000-4.20 is installed
  • OR salt-ssh-3000-4.20 is installed
  • OR salt-standalone-formulas-configuration-3000-4.20 is installed
  • OR salt-syndic-3000-4.20 is installed
  • BACK