SUSE-SU-2023:3145-1

Опубликовано: 02 авг. 2023

Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

Security fixes:

CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)
Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)

Список пакетов

Image SLES15-SP4-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-HPC-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Hardened-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-3-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-Micro-5-4-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-Hardened-BYOS

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

SUSE Linux Enterprise Micro 5.3

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

SUSE Linux Enterprise Micro 5.4

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

SUSE Linux Enterprise Module for Basesystem 15 SP4

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-bash-completion-3006.0-150400.8.37.2

salt-doc-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-zsh-completion-3006.0-150400.8.37.2

SUSE Linux Enterprise Module for Server Applications 15 SP4

salt-api-3006.0-150400.8.37.2

salt-cloud-3006.0-150400.8.37.2

salt-fish-completion-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-proxy-3006.0-150400.8.37.2

salt-ssh-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

salt-syndic-3006.0-150400.8.37.2

SUSE Linux Enterprise Module for Transactional Server 15 SP4

salt-transactional-update-3006.0-150400.8.37.2

openSUSE Leap 15.4

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-api-3006.0-150400.8.37.2

salt-bash-completion-3006.0-150400.8.37.2

salt-cloud-3006.0-150400.8.37.2

salt-doc-3006.0-150400.8.37.2

salt-fish-completion-3006.0-150400.8.37.2

salt-master-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-proxy-3006.0-150400.8.37.2

salt-ssh-3006.0-150400.8.37.2

salt-standalone-formulas-configuration-3006.0-150400.8.37.2

salt-syndic-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

salt-zsh-completion-3006.0-150400.8.37.2

openSUSE Leap Micro 5.3

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

openSUSE Leap Micro 5.4

python3-salt-3006.0-150400.8.37.2

salt-3006.0-150400.8.37.2

salt-minion-3006.0-150400.8.37.2

salt-transactional-update-3006.0-150400.8.37.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233145-1/
Link for SUSE-SU-2023:3145-1
https://lists.suse.com/pipermail/sle-security-updates/2023-August/015735.html
E-Mail link for SUSE-SU-2023:3145-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1210994
SUSE Bug 1210994
https://bugzilla.suse.com/1211591
SUSE Bug 1211591
https://bugzilla.suse.com/1211741
SUSE Bug 1211741
https://www.suse.com/security/cve/CVE-2023-28370/
SUSE CVE CVE-2023-28370 page

Описание

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:python3-salt-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-Azure:salt-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-Azure:salt-minion-3006.0-150400.8.37.2

Image SLES15-SP4-BYOS-EC2:python3-salt-3006.0-150400.8.37.2

Ссылки

https://www.suse.com/security/cve/CVE-2023-28370.html
CVE-2023-28370
https://bugzilla.suse.com/1211741
SUSE Bug 1211741

SUSE-SU-2023:3145-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

Image SLES15-SP4-Micro-5-3

Image SLES15-SP4-Micro-5-3-BYOS

Image SLES15-SP4-Micro-5-3-BYOS-Azure

Image SLES15-SP4-Micro-5-3-BYOS-EC2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3-EC2

Image SLES15-SP4-Micro-5-4

Image SLES15-SP4-Micro-5-4-BYOS

Image SLES15-SP4-Micro-5-4-BYOS-Azure

Image SLES15-SP4-Micro-5-4-BYOS-EC2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

Image SLES15-SP4-Micro-5-4-EC2

Image SLES15-SP4-Micro-5-4-GCE

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Server Applications 15 SP4

SUSE Linux Enterprise Module for Transactional Server 15 SP4

openSUSE Leap 15.4

openSUSE Leap Micro 5.3

openSUSE Leap Micro 5.4

Ссылки

Уязвимость: CVE-2023-28370

Описание

Затронутые продукты

Ссылки