< back to search

gpp_maybe Security update for suse manager salt bundle

SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-4749

This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for autosign_grains (bsc#1214477) * Remove non-free RNG schema file (bsc#1213351)

Release Date

Dec 13 2023
References

Bugzilla: 1214477, 1215157, 1213351
CVEs: CVE-2023-34049
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Manager Server Module 4.3 x86_64

Packages

venv-salt-minion
The venvjailed client component for Salt

3006.0-150000.3.48.2 lock rpm lock src

SUSE Manager Server Module 4.3 s390x

Packages

venv-salt-minion
The venvjailed client component for Salt

3006.0-150000.3.48.2 lock rpm lock src

SUSE Manager Server Module 4.3 ppc64le

Packages

venv-salt-minion
The venvjailed client component for Salt

3006.0-150000.3.48.2 lock rpm lock src