Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:1392-1 Rating: important References: #1170595 Cross-References: CVE-2020-11651 CVE-2020-11652 Affected Products: SUSE Enterprise Storage 5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for salt fixes the following issues: Security issues fixed: - CVE-2020-11651: Fixed the improper validation of method calls in salt-master, that could have allowed unauthenticated remote users to run arbitrary commands on salt minions (bsc#1170595). - CVE-2020-11652: Fixed an improper path sanitation in salt-master, that could have allowed authenticated users to access arbitrary directories (bsc#1170595). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2020-1392=1 Package List: - SUSE Enterprise Storage 5 (aarch64 x86_64): salt-2016.11.4-48.10.1 salt-api-2016.11.4-48.10.1 salt-master-2016.11.4-48.10.1 salt-minion-2016.11.4-48.10.1 References: https://www.suse.com/security/cve/CVE-2020-11651.html https://www.suse.com/security/cve/CVE-2020-11652.html https://bugzilla.suse.com/1170595 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.