Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2018:1757-1

UNKNOWN

Security update for salt

Published Jun 19, 2018

Modified 7 years ago

Fix available

Details

This update for salt provides version 2018.3 and brings many fixes and improvements:

Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
Prevent zypper from parsing repo configuration from not .repo files (bsc#1094055)
Collect all versions of installed packages on SUSE and RHEL systems (bsc#1089526)
No more AWS EC2 rate limitations in salt-cloud. (bsc#1088888)
MySQL returner now also allows to use Unix sockets. (bsc#1091371)
Do not override jid on returners, only sending back to master. (bsc#1092373)
Remove minion/thin/version if exists to force thin regeneration. (bsc#1092161)
Fix minion scheduler to return a 'retcode' attribute. (bsc#1089112)
Fix for logging during network interface querying. (bsc#1087581)
Fix rhel packages requires both net-tools and iproute. (bsc#1087055)
Fix patchinstall on yum module. Bad comparison. (bsc#1087278)
Strip trailing commas on Linux user's GECOS fields. (bsc#1089362)
Fallback to PyMySQL. (bsc#1087891)
Fix for [Errno 0] Resolver Error 0 (no error). (bsc#1087581)
Add python-2.6 support to salt-ssh.
Make it possible to use docker login, pull and push from module.run and detect errors.
Fix unicode decode error with salt-ssh.
Fix cp.push empty file. (bsc#1075950)
Fix grains containing trailing '\n'.
Remove salt-minion python2 requirement when python3 is default. (bsc#1081592)
Restoring installation of packages for Rhel 6 and 7.
Prevent queryformat pattern from expanding. (bsc#1079048)
Fix for delete_deployment in Kubernetes module. (bsc#1059291)
Fix bsc#1062464 and CVE-2017-14696 already included in 2017.7.2.
Fix wrong version reported by Salt. (bsc#1061407)
Run salt-api as user salt. (bsc#1064520)

For a detailed description, please refer to the upstream-changelog at https://docs.saltstack.com/en/latest/topics/releases/index.html or to the rpm-changelog.

supportutils-plugin-salt:

Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242)

Affected Packages(14 packages)

python2-salt

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Point of Sale 12 SP2SUSE Manager Client Tools 12SUSE Manager Proxy 3.0SUSE Manager Proxy 3.1

Fixed in:

2018.3.0-46.28.1

salt

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Point of Sale 12 SP2SUSE Manager Client Tools 12SUSE Manager Proxy 3.0SUSE Manager Proxy 3.1

Fixed in:

2018.3.0-46.28.1

salt-api

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-bash-completion

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-cloud

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-doc

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Client Tools 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-master

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-minion

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Point of Sale 12 SP2SUSE Manager Client Tools 12SUSE Manager Proxy 3.0SUSE Manager Proxy 3.1

Fixed in:

2018.3.0-46.28.1

salt-proxy

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

salt-ssh

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Manager Proxy 3.0SUSE Manager Server 3.0SUSE Manager Server 3.1

Fixed in:

2018.3.0-46.28.1

References

REPORThttps://bugzilla.suse.com/1059291 REPORThttps://bugzilla.suse.com/1061407 REPORThttps://bugzilla.suse.com/1062464 REPORThttps://bugzilla.suse.com/1064520 REPORThttps://bugzilla.suse.com/1075950 REPORThttps://bugzilla.suse.com/1079048 REPORThttps://bugzilla.suse.com/1081592 REPORThttps://bugzilla.suse.com/1087055 REPORThttps://bugzilla.suse.com/1087278 REPORThttps://bugzilla.suse.com/1087581 REPORThttps://bugzilla.suse.com/1087891 REPORThttps://bugzilla.suse.com/1088888 REPORThttps://bugzilla.suse.com/1089112 REPORThttps://bugzilla.suse.com/1089362 REPORThttps://bugzilla.suse.com/1089526 REPORThttps://bugzilla.suse.com/1090242 REPORThttps://bugzilla.suse.com/1091371 REPORThttps://bugzilla.suse.com/1092161 REPORThttps://bugzilla.suse.com/1092373 REPORThttps://bugzilla.suse.com/1094055 REPORThttps://bugzilla.suse.com/1097174 REPORThttps://bugzilla.suse.com/1097413 WEBhttps://www.suse.com/security/cve/CVE-2017-14695 WEBhttps://www.suse.com/security/cve/CVE-2017-14696 ADVISORYhttps://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/

Upstream

CVE-2017-14695 CVE-2017-14696

Related

CVE-2017-14695 CVE-2017-14696

Ecosystems(7)

SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Manager Client Tools 12 SUSE Manager Proxy 3.0 SUSE Manager Proxy 3.1

Timeline

PublishedJun 19, 2018

ModifiedJun 19, 2018

SUSE-SU-2018:1757-1 | Mondoo Vulnerability Intelligence