SUSE-SU-2023:3139-1

Опубликовано: 02 авг. 2023

Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

Security fixes:

CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)
Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-api-3006.0-150500.4.12.2

salt-master-3006.0-150500.4.12.2

Image SLES15-SP5-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-HPC-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-HPC-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-HPC-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-Hardened-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-Hardened-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-Hardened-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-Micro-5-5-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-HPC-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-Hardened-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-Hardened-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-Hardened-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-Hardened-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-Hardened-BYOS

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image SLES15-SP6-SAP-Hardened-EC2

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

Image server-image

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-api-3006.0-150500.4.12.2

salt-master-3006.0-150500.4.12.2

SUSE Linux Enterprise Module for Basesystem 15 SP5

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-bash-completion-3006.0-150500.4.12.2

salt-doc-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-zsh-completion-3006.0-150500.4.12.2

SUSE Linux Enterprise Module for Server Applications 15 SP5

salt-api-3006.0-150500.4.12.2

salt-cloud-3006.0-150500.4.12.2

salt-fish-completion-3006.0-150500.4.12.2

salt-master-3006.0-150500.4.12.2

salt-proxy-3006.0-150500.4.12.2

salt-ssh-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

salt-syndic-3006.0-150500.4.12.2

SUSE Linux Enterprise Module for Transactional Server 15 SP5

salt-transactional-update-3006.0-150500.4.12.2

openSUSE Leap 15.5

python3-salt-3006.0-150500.4.12.2

salt-3006.0-150500.4.12.2

salt-api-3006.0-150500.4.12.2

salt-bash-completion-3006.0-150500.4.12.2

salt-cloud-3006.0-150500.4.12.2

salt-doc-3006.0-150500.4.12.2

salt-fish-completion-3006.0-150500.4.12.2

salt-master-3006.0-150500.4.12.2

salt-minion-3006.0-150500.4.12.2

salt-proxy-3006.0-150500.4.12.2

salt-ssh-3006.0-150500.4.12.2

salt-standalone-formulas-configuration-3006.0-150500.4.12.2

salt-syndic-3006.0-150500.4.12.2

salt-tests-3006.0-150500.4.12.2

salt-transactional-update-3006.0-150500.4.12.2

salt-zsh-completion-3006.0-150500.4.12.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233139-1/
Link for SUSE-SU-2023:3139-1
https://lists.suse.com/pipermail/sle-security-updates/2023-August/015739.html
E-Mail link for SUSE-SU-2023:3139-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1210994
SUSE Bug 1210994
https://bugzilla.suse.com/1211591
SUSE Bug 1211591
https://bugzilla.suse.com/1211741
SUSE Bug 1211741
https://www.suse.com/security/cve/CVE-2023-28370/
SUSE CVE CVE-2023-28370 page

Описание

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:python3-salt-3006.0-150500.4.12.2

Container suse/manager/5.0/x86_64/server:latest:salt-3006.0-150500.4.12.2

Container suse/manager/5.0/x86_64/server:latest:salt-api-3006.0-150500.4.12.2

Container suse/manager/5.0/x86_64/server:latest:salt-master-3006.0-150500.4.12.2

Ссылки

https://www.suse.com/security/cve/CVE-2023-28370.html
CVE-2023-28370
https://bugzilla.suse.com/1211741
SUSE Bug 1211741

SUSE-SU-2023:3139-1

Описание

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

Image SLES15-SP5-BYOS-Azure

Image SLES15-SP5-BYOS-EC2

Image SLES15-SP5-BYOS-GCE

Image SLES15-SP5-HPC-BYOS-Azure

Image SLES15-SP5-HPC-BYOS-EC2

Image SLES15-SP5-HPC-BYOS-GCE

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-GCE

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

Image SLES15-SP5-Manager-Server-5-0

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

Image SLES15-SP5-Manager-Server-5-0-BYOS

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

Image SLES15-SP5-Micro-5-5

Image SLES15-SP5-Micro-5-5-Azure

Image SLES15-SP5-Micro-5-5-BYOS

Image SLES15-SP5-Micro-5-5-BYOS-Azure

Image SLES15-SP5-Micro-5-5-BYOS-EC2

Image SLES15-SP5-Micro-5-5-BYOS-GCE

Image SLES15-SP5-Micro-5-5-EC2

Image SLES15-SP5-Micro-5-5-GCE

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-BYOS

Image SLES15-SP6-BYOS-Azure

Image SLES15-SP6-BYOS-EC2

Image SLES15-SP6-BYOS-GCE

Image SLES15-SP6-HPC-BYOS

Image SLES15-SP6-HPC-BYOS-Azure

Image SLES15-SP6-HPC-BYOS-EC2

Image SLES15-SP6-HPC-BYOS-GCE

Image SLES15-SP6-HPC-EC2

Image SLES15-SP6-HPC-GCE

Image SLES15-SP6-Hardened-BYOS

Image SLES15-SP6-Hardened-BYOS-Azure

Image SLES15-SP6-Hardened-BYOS-EC2

Image SLES15-SP6-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image server-image

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Server Applications 15 SP5

SUSE Linux Enterprise Module for Transactional Server 15 SP5

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-28370

Описание

Затронутые продукты

Ссылки