Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2022:1051-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2022:1051-1

UNKNOWN

Security update for salt

Published Mar 30, 2022

Modified 3 years ago

Fix available

Details

This update for salt fixes the following issues:

CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417)
CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417)
CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417)
CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)

Affected Packages

SUSE:Linux Enterprise Module for Advanced Systems Management 12python2-salt

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-api

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-bash-completion

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-cloud

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-doc

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-master

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-minion

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-proxy

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-ssh

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-standalone-formulas-configuration

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-syndic

Fixed in:

3000-58.1

SUSE:Linux Enterprise Module for Advanced Systems Management 12salt-zsh-completion

Fixed in:

3000-58.1

SUSE:Manager Client Tools 12python2-salt

Fixed in:

3000-58.1

SUSE:Manager Client Tools 12python3-salt

Fixed in:

3000-58.1

SUSE:Manager Client Tools 12salt

Fixed in:

3000-58.1

SUSE:Manager Client Tools 12salt-doc

Fixed in:

3000-58.1

SUSE:Manager Client Tools 12salt-minion

Fixed in:

3000-58.1

Timeline

PublishedMar 30, 2022

ModifiedMar 30, 2022

SUSE-SU-2022:1051-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline