SUSE-SU-2023:2585-1

    Dashboard / Vulnerabilities / SUSE-SU-2023:2585-1

    SUSE-SU-2023:2585-1

    Published: 21 Jun 2023Last Modified: 21 Jun 2023

    Summary: Security update for salt and python-pyzmq

    Details: This update for salt and python-pyzmq fixes the following issues: salt: - Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Create new salt-tests subpackage containing Salt tests - Drop conflictive patch dicarded from upstream - Fix package build with old setuptools versions - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Prevent deadlocks in salt-ssh executions - Require python3-jmespath runtime dependency (bsc#1209233) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517) python-pyzmq: - Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)

    References: https://www.suse.com/support/update/announcement/2023/suse-su-20232585-1/, https://bugzilla.suse.com/1186945, https://bugzilla.suse.com/1207071, https://bugzilla.suse.com/1209233, https://bugzilla.suse.com/1211612, https://bugzilla.suse.com/1211754, https://bugzilla.suse.com/1212516, https://bugzilla.suse.com/1212517

    Affected packages

    Package

    Name: python-pyzmq

    Purl: pkg:rpm/suse/python-pyzmq&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -17.1.2-150000.3.5.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2023:2585-1 | CVE-DB