Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3550-1

Опубликовано: 27 окт. 2021
Источник: suse-cvrf

Описание

Security update for Salt

This update fixes the following issues:

salt:

  • Fix the regression of docker_container state module
  • Support querying for JSON data in external sql pillar
  • Exclude the full path of a download URL to prevent injection of malicious code (bsc#1190265) (CVE-2021-21996)
  • Fix wrong relative paths resolution with Jinja renderer when importing subdirectories

Список пакетов

Image SLES12-SP4-Azure-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP4-EC2-HVM-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP4-GCE-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP4-SAP-Azure-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP4-SAP-EC2-HVM-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP4-SAP-GCE-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-Azure-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-Azure-HPC-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-Azure-SAP-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-EC2-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-EC2-SAP-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-GCE-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
Image SLES12-SP5-GCE-SAP-BYOS
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-minion-3000-46.151.2
SUSE Linux Enterprise Module for Advanced Systems Management 12
python2-salt-3000-46.151.2
salt-3000-46.151.2
salt-api-3000-46.151.2
salt-bash-completion-3000-46.151.2
salt-cloud-3000-46.151.2
salt-doc-3000-46.151.2
salt-master-3000-46.151.2
salt-minion-3000-46.151.2
salt-proxy-3000-46.151.2
salt-ssh-3000-46.151.2
salt-standalone-formulas-configuration-3000-46.151.2
salt-syndic-3000-46.151.2
salt-zsh-completion-3000-46.151.2
SUSE Manager Client Tools 12
python2-salt-3000-46.151.2
python3-salt-3000-46.151.2
salt-3000-46.151.2
salt-doc-3000-46.151.2
salt-minion-3000-46.151.2

Ссылки

Описание

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

Затронутые продукты
Image SLES12-SP4-Azure-BYOS:python2-salt-3000-46.151.2
Image SLES12-SP4-Azure-BYOS:salt-3000-46.151.2
Image SLES12-SP4-Azure-BYOS:salt-minion-3000-46.151.2
Image SLES12-SP4-EC2-HVM-BYOS:python2-salt-3000-46.151.2
Ссылки