SUSE-SU-2021:2102-1 Not scored

Security update for Salt

This update fixes the following issues: salt: - Parsing Epoch out of version provided during pkg remove (bsc#1173692) - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607) - Transactional_update: detect recursion in the executor - Add subpackage salt-transactional-update - Remove duplicate directories from specfile - Improvements on 'ansiblegate' module (bsc#1185092): * New methods: ansible.targets / ansible.discover_playbooks * General bugfixes - Add support for Alibaba Cloud Linux 2 (Aliyun Linux) - Regression fix of salt-ssh on processing targets - Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281) - Add notify beacon for Debian/Ubuntu systems - Fix zmq bug that causes salt-call to freeze (bsc#1181368)

Exploit probability Not scored

Published June 21, 2021

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Advanced Systems Management 12 salt

SUSE:Manager Client Tools 12 salt

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2021-31607

upstream CVE-2021-31607

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:2102-1

View original source

05 / REFERENCES

Affected packages

Connected vulnerabilities

Source records

Further evidence