SUSE-SU-2020:0763-1

Source
https://www.suse.com/support/update/announcement/2020/suse-su-20200763-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0763-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:0763-1
Upstream
  • CVE-2019-18897
Related
  • CVE-2019-18897
Published
2020-03-24T14:52:56Z
Modified
2026-02-04T03:27:36Z
Summary
Security Beta update for Salt
Details

This update fixes the following issues:

salt:

  • Requiring python3-distro only for openSUSE/SLE >= 15
  • Use full option name instead of undocumented abbreviation for zypper
  • Python-distro is only needed for > Python 3.7. Removing it for Python 2
  • Fixed a local privilege escalation to root (bsc#1157465) (CVE-2019-18897)
  • Fix unit tests failures in test_batch_async tests
  • Batch Async: Handle exceptions, properly unregister and close instances after running async batching to avoid CPU starvation of the MWorkers (bsc#1162327)
  • RHEL/CentOS 8 uses platform-python instead of python3
  • Enable build for Python 3.8
  • Update to Salt version 2019.2.3 (bsc#1163981) (bsc#1162504)
  • Replacing pycrypto with M2Crypto (bsc#1165425)
References

Affected packages