SUSE-SU-2018:3813-1

UNKNOWN

Security update for salt

Published Nov 19, 2018

Modified 7 years ago

Fix available

Details

This update for salt fixes the following issues:

Salt was updated to version 2016.11.10 and contains the following fixes:

Security issues fixed:

CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698).
CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699).

Affected Packages

salt

SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSSUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS

Fixed in:

2016.11.10-43.38.1

salt-doc

SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSSUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS

Fixed in:

2016.11.10-43.38.1

salt-minion

SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSSUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS

Fixed in:

2016.11.10-43.38.1

References

Upstream

Ecosystems

Timeline

PublishedNov 19, 2018

ModifiedNov 19, 2018