Lucene search

K
suseSuseOPENSUSE-SU-2018:4174-1
HistoryDec 18, 2018 - 3:09 p.m.

Security update for salt (important)

2018-12-1815:09:06
lists.opensuse.org
77

0.028 Low

EPSS

Percentile

89.6%

This update for salt fixes the following issues:

Security issues fixed:

  • CVE-2018-15750: Fixed directory traversal vulnerability in salt-api
    (bsc#1113698).
  • CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi)
    that allows to execute arbitrary commands (bsc#1113699).

Non-security issues fixed:

  • Improved handling of LDAP group id. gid is no longer treated as a
    string, which could have lead to faulty group creations (bsc#1113784).
  • Fixed async call to process manager (bsc#1110938)
  • Fixed OS arch detection when RPM is not installed (bsc#1114197)
  • Crontab module fix: file attributes option missing (bsc#1114824)
  • Fix git_pillar merging across multiple env repositories (bsc#1112874)

This update was imported from the SUSE:SLE-15:Update update project.