openSUSE Security Update : salt (openSUSE-2018-388)

This update for salt fixes the following issues : - Regression Permission problem: salt-ssh minion boostrap doesn't work anymore. bsc1027722 - wrong use of osfamily string for Suse in the locale module and others bsc1038855 - Cannot bootstrap a host using 'Manage system completely via SSH will no...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2016-9639 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2016-9639 Source advisory: OSV:PYSEC-2017-34...

CVE-2016-9639

CVE-2016-9639 affects Salt before 2015.8.11. The issue arises from caching behavior that allows deleted minions to read or write to other minions sharing the same id. Affected component: Salt minion management; root cause: improper handling of cached keys/minion identity. Impact per the provided ...