SUSE-SU-2018:1757-1

    Dashboard / Vulnerabilities / SUSE-SU-2018:1757-1

    SUSE-SU-2018:1757-1

    Published: 19 Jun 2018Last Modified: 4 Feb 2026

    Summary: Security update for salt

    Details: This update for salt provides version 2018.3 and brings many fixes and improvements: - Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413) - Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt - Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn - Prevent zypper from parsing repo configuration from not .repo files (bsc#1094055) - Collect all versions of installed packages on SUSE and RHEL systems (bsc#1089526) - No more AWS EC2 rate limitations in salt-cloud. (bsc#1088888) - MySQL returner now also allows to use Unix sockets. (bsc#1091371) - Do not override jid on returners, only sending back to master. (bsc#1092373) - Remove minion/thin/version if exists to force thin regeneration. (bsc#1092161) - Fix minion scheduler to return a 'retcode' attribute. (bsc#1089112) - Fix for logging during network interface querying. (bsc#1087581) - Fix rhel packages requires both net-tools and iproute. (bsc#1087055) - Fix patchinstall on yum module. Bad comparison. (bsc#1087278) - Strip trailing commas on Linux user's GECOS fields. (bsc#1089362) - Fallback to PyMySQL. (bsc#1087891) - Fix for [Errno 0] Resolver Error 0 (no error). (bsc#1087581) - Add python-2.6 support to salt-ssh. - Make it possible to use docker login, pull and push from module.run and detect errors. - Fix unicode decode error with salt-ssh. - Fix cp.push empty file. (bsc#1075950) - Fix grains containing trailing '\n'. - Remove salt-minion python2 requirement when python3 is default. (bsc#1081592) - Restoring installation of packages for Rhel 6 and 7. - Prevent queryformat pattern from expanding. (bsc#1079048) - Fix for delete_deployment in Kubernetes module. (bsc#1059291) - Fix bsc#1062464 and CVE-2017-14696 already included in 2017.7.2. - Fix wrong version reported by Salt. (bsc#1061407) - Run salt-api as user salt. (bsc#1064520) For a detailed description, please refer to the upstream-changelog at https://docs.saltstack.com/en/latest/topics/releases/index.html or to the rpm-changelog. supportutils-plugin-salt: - Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242)

    References: https://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/, https://bugzilla.suse.com/1059291, https://bugzilla.suse.com/1061407, https://bugzilla.suse.com/1062464, https://bugzilla.suse.com/1064520, https://bugzilla.suse.com/1075950, https://bugzilla.suse.com/1079048, https://bugzilla.suse.com/1081592, https://bugzilla.suse.com/1087055, https://bugzilla.suse.com/1087278, https://bugzilla.suse.com/1087581, https://bugzilla.suse.com/1087891, https://bugzilla.suse.com/1088888, https://bugzilla.suse.com/1089112, https://bugzilla.suse.com/1089362, https://bugzilla.suse.com/1089526, https://bugzilla.suse.com/1090242, https://bugzilla.suse.com/1091371, https://bugzilla.suse.com/1092161, https://bugzilla.suse.com/1092373, https://bugzilla.suse.com/1094055, https://bugzilla.suse.com/1097174, https://bugzilla.suse.com/1097413, https://www.suse.com/security/cve/CVE-2017-14695, https://www.suse.com/security/cve/CVE-2017-14696

    Affected packages

    Package

    Name: salt

    Purl: pkg:rpm/suse/salt&distro=SUSE%20Manager%20Client%20Tools%2012

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2018.3.0-46.28.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2018:1757-1 | CVE-DB