SUSE-SU-2023:4748-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:4748-1

Upstream

Related

Published

2023-12-13T09:24:14Z

Modified

2026-02-04T03:06:04Z

Summary

Security update for SUSE Manager Salt Bundle

Details

This update fixes the following issues:

venv-salt-minion:

Security fixes:
- CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157)
Non security fixes:
- Add python dateutil module to the bundle
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Remove non-free RNG schema file (bsc#1213351)

References

Affected packages

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Manager%20Client%20Tools%2012

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-3.46.2

{
    "binaries":  [
        {
            "venv-salt-minion":  "3006.0-3.46.2"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4748-1.json"