Описание
Security update for salt
This update for salt fixes the following issues:
Security issues fixed:
- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)
Bugs fixed:
- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Allow all primitive grain types for autosign_grains (bsc#1214477)
Список пакетов
Container bci/kiwi:latest
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP3-BYOS-Azure
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-BYOS-EC2-HVM
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-BYOS-GCE
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-HPC-BYOS-Azure
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-HPC-BYOS-EC2-HVM
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-HPC-BYOS-GCE
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-1-BYOS-Azure
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-1-BYOS-GCE
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-2-BYOS-Azure
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-Micro-5-2-BYOS-GCE
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
Image SLES15-SP3-SAP-BYOS-Azure
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
Image SLES15-SP3-SAP-BYOS-EC2-HVM
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
Image SLES15-SP3-SAP-BYOS-GCE
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
Image SLES15-SP3-SAPCAL-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP3-SAPCAL-EC2-HVM
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-HPC-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Hardened-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-Micro-5-4-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SAP-Hardened-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-HPC-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-HPC-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-HPC-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Hardened-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-Micro-5-5-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP5-SAP-Hardened-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-HPC-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-Hardened-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-BYOS
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-EC2
python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP6-SAP-Hardened-GCE
python3-simplejson-3.17.2-150300.3.4.1
Image server-image
python3-simplejson-3.17.2-150300.3.4.1
SUSE Enterprise Storage 7.1
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-api-3006.0-150300.53.65.2
salt-bash-completion-3006.0-150300.53.65.2
salt-cloud-3006.0-150300.53.65.2
salt-doc-3006.0-150300.53.65.2
salt-fish-completion-3006.0-150300.53.65.2
salt-master-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-proxy-3006.0-150300.53.65.2
salt-ssh-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
salt-syndic-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
salt-zsh-completion-3006.0-150300.53.65.2
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-api-3006.0-150300.53.65.2
salt-bash-completion-3006.0-150300.53.65.2
salt-cloud-3006.0-150300.53.65.2
salt-doc-3006.0-150300.53.65.2
salt-fish-completion-3006.0-150300.53.65.2
salt-master-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-proxy-3006.0-150300.53.65.2
salt-ssh-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
salt-syndic-3006.0-150300.53.65.2
salt-zsh-completion-3006.0-150300.53.65.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-api-3006.0-150300.53.65.2
salt-bash-completion-3006.0-150300.53.65.2
salt-cloud-3006.0-150300.53.65.2
salt-doc-3006.0-150300.53.65.2
salt-fish-completion-3006.0-150300.53.65.2
salt-master-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-proxy-3006.0-150300.53.65.2
salt-ssh-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
salt-syndic-3006.0-150300.53.65.2
salt-zsh-completion-3006.0-150300.53.65.2
SUSE Linux Enterprise Micro 5.1
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
SUSE Linux Enterprise Micro 5.2
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
SUSE Linux Enterprise Micro 5.3
python3-simplejson-3.17.2-150300.3.4.1
SUSE Linux Enterprise Micro 5.4
python3-simplejson-3.17.2-150300.3.4.1
SUSE Linux Enterprise Micro 5.5
python3-simplejson-3.17.2-150300.3.4.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
python3-simplejson-3.17.2-150300.3.4.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
python3-simplejson-3.17.2-150300.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSS
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-api-3006.0-150300.53.65.2
salt-bash-completion-3006.0-150300.53.65.2
salt-cloud-3006.0-150300.53.65.2
salt-doc-3006.0-150300.53.65.2
salt-fish-completion-3006.0-150300.53.65.2
salt-master-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-proxy-3006.0-150300.53.65.2
salt-ssh-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
salt-syndic-3006.0-150300.53.65.2
salt-transactional-update-3006.0-150300.53.65.2
salt-zsh-completion-3006.0-150300.53.65.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
python3-salt-3006.0-150300.53.65.2
python3-simplejson-3.17.2-150300.3.4.1
salt-3006.0-150300.53.65.2
salt-api-3006.0-150300.53.65.2
salt-bash-completion-3006.0-150300.53.65.2
salt-cloud-3006.0-150300.53.65.2
salt-doc-3006.0-150300.53.65.2
salt-fish-completion-3006.0-150300.53.65.2
salt-master-3006.0-150300.53.65.2
salt-minion-3006.0-150300.53.65.2
salt-proxy-3006.0-150300.53.65.2
salt-ssh-3006.0-150300.53.65.2
salt-standalone-formulas-configuration-3006.0-150300.53.65.2
salt-syndic-3006.0-150300.53.65.2
salt-zsh-completion-3006.0-150300.53.65.2
openSUSE Leap 15.4
python3-simplejson-3.17.2-150300.3.4.1
openSUSE Leap 15.5
python3-simplejson-3.17.2-150300.3.4.1
openSUSE Leap Micro 5.3
python3-simplejson-3.17.2-150300.3.4.1
openSUSE Leap Micro 5.4
python3-simplejson-3.17.2-150300.3.4.1
Ссылки
- Link for SUSE-SU-2023:4388-1
- E-Mail link for SUSE-SU-2023:4388-1
- SUSE Security Ratings
- SUSE Bug 1213293
- SUSE Bug 1213518
- SUSE Bug 1214477
- SUSE Bug 1215157
- SUSE CVE CVE-2023-34049 page
Описание
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.
Затронутые продукты
Container bci/kiwi:latest:python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP3-BYOS-Azure:python3-salt-3006.0-150300.53.65.2
Image SLES15-SP3-BYOS-Azure:python3-simplejson-3.17.2-150300.3.4.1
Image SLES15-SP3-BYOS-Azure:salt-3006.0-150300.53.65.2
Ссылки
- CVE-2023-34049
- SUSE Bug 1215157