SUSE-SU-2023:3139-1

UNKNOWN

Security update for salt

Published Aug 2, 2023

Modified 2 years ago

Fix available

Details

This update for salt fixes the following issues:

Security fixes:

CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)
Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)

Affected Packages(16 packages)

python3-salt

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

3006.0-150500.4.12.2

salt

SUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5SUSE Linux Enterprise Module for Transactional Server 15 SP5openSUSE Leap 15.5

Fixed in:

3006.0-150500.4.12.2

salt-bash-completion

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

3006.0-150500.4.12.2

salt-doc

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

3006.0-150500.4.12.2

salt-minion

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5