Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Ubuntu Security Update 2020:2746-1 for Improved Network Safety

suse
Calendar Grey June 19, 2018
Dist Suse Esm H88
SUSE enhances salt by rolling out 20 updates that rectify a pair of security vulnerabilities. Please examine the patch guidelines for proper implementation.
An update that solves two vulnerabilities and has 20 fixes is now available

Summary

This update for salt provides version 2018.3 and brings many fixes and improvements: - Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413) - Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt - Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn - Prevent zypper from parsing repo configuration from not .repo files (bsc#1094055) - Collect all versions of installed packages on SUSE and RHEL systems (bsc#1089526) - No more AWS EC2 rate limitations in salt-cloud. (bsc#1088888) - MySQL returner now also allows to use Unix sockets. (bsc#1091371) - Do not override jid on returners, only sending back to master. (bsc#1092373) - Remove minion/thin/version if exists to force thin regeneration. (bsc#1092161)

References

#1059291 #1061407 #1062464 #1064520 #1075950

#1079048 #1081592 #1087055 #1087278 #1087581

#1087891 #1088888 #1089112 #1089362 #1089526

#1090242 #1091371 #1092161 #1092373 #1094055

#1097174 #1097413

Cross- CVE-2017-14695 CVE-2017-14696

Affected Products:

SUSE Manager Tools 12

SUSE Manager Server 3.1

SUSE Manager Server 3.0

SUSE Manager Proxy 3.1

SUSE Manager Proxy 3.0

SUSE Linux Enterprise Point of Sale 12-SP2

SUSE Linux Enterprise Module for Advanced Systems Management 12

https://www.suse.com/security/cve/CVE-2017-14695.html

https://www.suse.com/security/cve/CVE-2017-14696.html

https://bugzilla.suse.com/1059291

https://bugzilla.suse.com/1061407

https://bugzilla.suse.com/1062464

https://bugzilla.suse.com/1064520

https://bugzilla.suse.com/1075950

Announcement ID: SUSE-SU-2018:1757-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here