SUSE-SU-2021:3556-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2021:3556-1

UNKNOWN

Security update for salt

Published Oct 27, 2021

Modified 4 years ago

Fix available

Details

This update for salt fixes the following issues:

Support querying for JSON data in external sql pillar.
Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265, CVE-2021-21996)

Affected Packages(15 packages)

python3-salt

SUSE Linux Enterprise Micro 5.0SUSE Linux Enterprise Module for Basesystem 15 SP2

Fixed in:

3002.2-49.2

salt

SUSE Linux Enterprise Micro 5.0SUSE Linux Enterprise Module for Basesystem 15 SP2SUSE Linux Enterprise Module for Server Applications 15 SP2SUSE Linux Enterprise Module for Transactional Server 15 SP2

Fixed in:

3002.2-49.2

salt-minion

SUSE Linux Enterprise Micro 5.0SUSE Linux Enterprise Module for Basesystem 15 SP2

Fixed in:

3002.2-49.2

salt-transactional-update

SUSE Linux Enterprise Micro 5.0SUSE Linux Enterprise Module for Transactional Server 15 SP2

Fixed in:

3002.2-49.2

salt-bash-completion

SUSE Linux Enterprise Module for Basesystem 15 SP2