openSUSE: 2018:4197-1 Moderate: Salt Access Control Issues

This update for salt fixes the following issues:

- Crontab module fix: file attributes option missing (boo#1114824)

- Fix git_pillar merging across multiple __env__ repositories (boo#1112874)

- Bugfix: unable to detect os arch when RPM is not installed (boo#1114197)

- Fix LDAP authentication issue when a valid token is generated by the

salt-api even when invalid user credentials are passed. (U#48901)

- Improved handling of LDAP group id. gid is no longer treated as a

string, which could have lead to faulty group creations. (boo#1113784)

- Fix remote command execution and incorrect access control when using

salt-api. (boo#1113699) (CVE-2018-15751)

- Fix Directory traversal vulnerability when using salt-api. Allows an

attacker to determine what files exist on a server when querying /run or

/events. (boo#1113698) (CVE-2018-15750)

- Add multi-file support and globbing to the filetree (U#50018)

- Bugfix: supportconfig non-root...