< back to search

gpp_maybe Security update for salt

SUSE-SLE-Module-Transactional-Server-15-SP3-2022-1059

This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417) - CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)

Release Date

Mar 30 2022
References

Bugzilla: 1197417
CVEs: CVE-2022-22941, CVE-2022-22936, CVE-2022-22934, CVE-2022-22935
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Transactional Server Module 15.3 s390x

Packages

salt
A parallel remote execution system

3002.2-150300.53.10.1 lock src

salt-transactional-update
Transactional update executor configuration

3002.2-150300.53.10.1 lock rpm

Transactional Server Module 15.3 aarch64

Packages

salt
A parallel remote execution system

3002.2-150300.53.10.1 lock src

salt-transactional-update
Transactional update executor configuration

3002.2-150300.53.10.1 lock rpm

Transactional Server Module 15.3 ppc64le

Packages

salt
A parallel remote execution system

3002.2-150300.53.10.1 lock src

salt-transactional-update
Transactional update executor configuration

3002.2-150300.53.10.1 lock rpm

Transactional Server Module 15.3 x86_64

Packages

salt
A parallel remote execution system

3002.2-150300.53.10.1 lock src

salt-transactional-update
Transactional update executor configuration

3002.2-150300.53.10.1 lock rpm