FlawAtlas
Search the atlas
SUSE-RU-2017:0171-1 Not scored

Recommended update for salt

This update for Salt fixes one security issue and several non-security issues. The following security issue has been fixed: - Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639) The following non-security issues have been fixed: - Update to 2015.8.12 - Add pre-require to salt for minions. - Do not restart salt-minion in salt package. - Add try-restart to sys-v init scripts. - Add 'Restart=on-failure' for salt-minion systemd service. - Re-introduce 'KillMode=process' for salt-minion systemd service. - Successfully exit of salt-api child processes when SIGTERM is received. - Fix exit codes of sysv init script. (bsc#999852) - Include resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade. - Fix Salt API crash via salt-ssh on empty roster. (bsc#1004723) - Add 'dist-upgrade' support to zypper module. (fate#320559) - Fix position of -X option to setfacl. (bsc#1004260) - Fix generated shebang in scripts on SLES-ES 7. (bsc#1004047) - Fix changing default-timezone. (bsc#1008933)

Exploit probability Not scored
Published January 17, 2017
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 4 salt

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-RU-2017:0171-1

This update for Salt fixes one security issue and several non-security issues. The following security issue has been fixed: - Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639) The following non-security issues have been fixed: - Update to 2015.8.12 - Add pre-require to salt for minions. - Do not restart salt-minion in salt package. - Add try-restart to sys-v init scripts. - Add 'Restart=on-failure' for salt-minion systemd service. - Re-introduce 'KillMode=process' for salt-minion systemd service. - Successfully exit of salt-api child processes when SIGTERM is received. - Fix exit codes of sysv init script. (bsc#999852) - Include resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade. - Fix Salt API crash via salt-ssh on empty roster. (bsc#1004723) - Add 'dist-upgrade' support to zypper module. (fate#320559) - Fix position of -X option to setfacl. (bsc#1004260) - Fix generated shebang in scripts on SLES-ES 7. (bsc#1004047) - Fix changing default-timezone. (bsc#1008933)

View original source

05 / REFERENCES

Further evidence