SUSE-SU-2023:4387-1

Опубликовано: 09 нояб. 2023

Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issues:

Security issues fixed:

CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)

Bugs fixed:

Fix optimization_order opt to prevent testsuite fails
Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
Use salt-call from salt bundle with transactional_update
Only call native_str on curl_debug message in tornado when needed
Implement the calling for batch async from the salt CLI
Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518)
Rename salt-tests to python3-salt-testsuite
Allow all primitive grain types for autosign_grains (bsc#1214477)

Список пакетов

Image SLES15-SP4-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-HPC-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Hardened-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-3-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-Micro-5-4-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-Hardened-BYOS

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

SUSE Linux Enterprise Micro 5.3

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

SUSE Linux Enterprise Micro 5.4

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

SUSE Linux Enterprise Module for Basesystem 15 SP4

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-bash-completion-3006.0-150400.8.49.2

salt-doc-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-zsh-completion-3006.0-150400.8.49.2

SUSE Linux Enterprise Module for Server Applications 15 SP4

salt-api-3006.0-150400.8.49.2

salt-cloud-3006.0-150400.8.49.2

salt-fish-completion-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-proxy-3006.0-150400.8.49.2

salt-ssh-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

salt-syndic-3006.0-150400.8.49.2

SUSE Linux Enterprise Module for Transactional Server 15 SP4

salt-transactional-update-3006.0-150400.8.49.2

openSUSE Leap 15.4

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-api-3006.0-150400.8.49.2

salt-bash-completion-3006.0-150400.8.49.2

salt-cloud-3006.0-150400.8.49.2

salt-doc-3006.0-150400.8.49.2

salt-fish-completion-3006.0-150400.8.49.2

salt-master-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-proxy-3006.0-150400.8.49.2

salt-ssh-3006.0-150400.8.49.2

salt-standalone-formulas-configuration-3006.0-150400.8.49.2

salt-syndic-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

salt-zsh-completion-3006.0-150400.8.49.2

openSUSE Leap Micro 5.3

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

openSUSE Leap Micro 5.4

python3-salt-3006.0-150400.8.49.2

salt-3006.0-150400.8.49.2

salt-minion-3006.0-150400.8.49.2

salt-transactional-update-3006.0-150400.8.49.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234387-1/
Link for SUSE-SU-2023:4387-1
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017013.html
E-Mail link for SUSE-SU-2023:4387-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1213293
SUSE Bug 1213293
https://bugzilla.suse.com/1213518
SUSE Bug 1213518
https://bugzilla.suse.com/1214477
SUSE Bug 1214477
https://bugzilla.suse.com/1215157
SUSE Bug 1215157
https://www.suse.com/security/cve/CVE-2023-34049/
SUSE CVE CVE-2023-34049 page

Описание

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:python3-salt-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-Azure:salt-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-Azure:salt-minion-3006.0-150400.8.49.2

Image SLES15-SP4-BYOS-EC2:python3-salt-3006.0-150400.8.49.2

Ссылки

https://www.suse.com/security/cve/CVE-2023-34049.html
CVE-2023-34049
https://bugzilla.suse.com/1215157
SUSE Bug 1215157

SUSE-SU-2023:4387-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

Image SLES15-SP4-Micro-5-3

Image SLES15-SP4-Micro-5-3-BYOS

Image SLES15-SP4-Micro-5-3-BYOS-Azure

Image SLES15-SP4-Micro-5-3-BYOS-EC2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3-EC2

Image SLES15-SP4-Micro-5-4

Image SLES15-SP4-Micro-5-4-BYOS

Image SLES15-SP4-Micro-5-4-BYOS-Azure

Image SLES15-SP4-Micro-5-4-BYOS-EC2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

Image SLES15-SP4-Micro-5-4-EC2

Image SLES15-SP4-Micro-5-4-GCE

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Server Applications 15 SP4

SUSE Linux Enterprise Module for Transactional Server 15 SP4

openSUSE Leap 15.4

openSUSE Leap Micro 5.3

openSUSE Leap Micro 5.4

Ссылки

Уязвимость: CVE-2023-34049

Описание

Затронутые продукты

Ссылки