SUSE-RU-2022:1389-1
- Source
- https://www.suse.com/support/update/announcement/2022/suse-ru-20221389-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2022:1389-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-RU-2022:1389-1
- Related
- Published
- 2022-04-25T14:41:23Z
- Modified
- 2022-04-25T14:41:23Z
- Summary
- Recommended update for salt
- Details
-
This update for salt fixes the following issues:
- Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions processed at the same time (bsc#1197637)
- Fix salt-ssh opts poisoning (bsc#1197637)
- Clear network interfaces cache on grains request (bsc#1196050)
- Add salt-ssh with Salt Bundle support (venv-salt-minion)
- Fix Salt-API failure due to an exception from the scheduled SSH-Push Tasks (bsc#1182851, bsc#1196432)
- Restrict 'state.orchestrate_single' to pass a pillar value if it exists (bsc#1194632)
- References
-
- https://www.suse.com/support/update/announcement/-2022-1389/suse-ru-20221389-1/
- https://bugzilla.suse.com/1182851
- https://bugzilla.suse.com/1194632
- https://bugzilla.suse.com/1196050
- https://bugzilla.suse.com/1196432
- https://bugzilla.suse.com/1197417
- https://bugzilla.suse.com/1197533
- https://bugzilla.suse.com/1197637
- https://www.suse.com/security/cve/CVE-2022-22934
- https://www.suse.com/security/cve/CVE-2022-22935
- https://www.suse.com/security/cve/CVE-2022-22936
- https://www.suse.com/security/cve/CVE-2022-22941
Affected packages
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}
SUSE:Linux Enterprise Server 15 SP1-BCL / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}
SUSE:Linux Enterprise Server 15 SP1-LTSS / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}
SUSE:Enterprise Storage 6 / salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Enterprise%20Storage%206
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3002.2-150100.63.1
Ecosystem specific
{
"binaries": [
{
"salt-bash-completion": "3002.2-150100.63.1",
"salt-cloud": "3002.2-150100.63.1",
"salt": "3002.2-150100.63.1",
"python3-salt": "3002.2-150100.63.1",
"salt-ssh": "3002.2-150100.63.1",
"salt-transactional-update": "3002.2-150100.63.1",
"salt-proxy": "3002.2-150100.63.1",
"salt-zsh-completion": "3002.2-150100.63.1",
"salt-standalone-formulas-configuration": "3002.2-150100.63.1",
"salt-syndic": "3002.2-150100.63.1",
"salt-master": "3002.2-150100.63.1",
"salt-doc": "3002.2-150100.63.1",
"salt-api": "3002.2-150100.63.1",
"salt-minion": "3002.2-150100.63.1",
"salt-fish-completion": "3002.2-150100.63.1"
}
]
}