Security update for salt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1757-1 Final 1 1 2018-06-19T13:32:11Z current 2018-06-19T13:32:11Z 2018-06-19T13:32:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for salt This update for salt provides version 2018.3 and brings many fixes and improvements: - Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413) - Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt - Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn - Prevent zypper from parsing repo configuration from not .repo files (bsc#1094055) - Collect all versions of installed packages on SUSE and RHEL systems (bsc#1089526) - No more AWS EC2 rate limitations in salt-cloud. (bsc#1088888) - MySQL returner now also allows to use Unix sockets. (bsc#1091371) - Do not override jid on returners, only sending back to master. (bsc#1092373) - Remove minion/thin/version if exists to force thin regeneration. (bsc#1092161) - Fix minion scheduler to return a 'retcode' attribute. (bsc#1089112) - Fix for logging during network interface querying. (bsc#1087581) - Fix rhel packages requires both net-tools and iproute. (bsc#1087055) - Fix patchinstall on yum module. Bad comparison. (bsc#1087278) - Strip trailing commas on Linux user's GECOS fields. (bsc#1089362) - Fallback to PyMySQL. (bsc#1087891) - Fix for [Errno 0] Resolver Error 0 (no error). (bsc#1087581) - Add python-2.6 support to salt-ssh. - Make it possible to use docker login, pull and push from module.run and detect errors. - Fix unicode decode error with salt-ssh. - Fix cp.push empty file. (bsc#1075950) - Fix grains containing trailing '\n'. - Remove salt-minion python2 requirement when python3 is default. (bsc#1081592) - Restoring installation of packages for Rhel 6 and 7. - Prevent queryformat pattern from expanding. (bsc#1079048) - Fix for delete_deployment in Kubernetes module. (bsc#1059291) - Fix bsc#1062464 and CVE-2017-14696 already included in 2017.7.2. - Fix wrong version reported by Salt. (bsc#1061407) - Run salt-api as user salt. (bsc#1064520) For a detailed description, please refer to the upstream-changelog at https://docs.saltstack.com/en/latest/topics/releases/index.html or to the rpm-changelog. supportutils-plugin-salt: - Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Manager-Tools-12-2018-1157,SUSE-SLE-Module-Adv-Systems-Management-12-2018-1157,SUSE-SLE-POS-12-SP2-2018-1157,SUSE-SUSE-Manager-Proxy-3.0-2018-1157,SUSE-SUSE-Manager-Proxy-3.1-2018-1157,SUSE-SUSE-Manager-Server-3.0-2018-1157,SUSE-SUSE-Manager-Server-3.1-2018-1157 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/ Link for SUSE-SU-2018:1757-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004202.html E-Mail link for SUSE-SU-2018:1757-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1059291 SUSE Bug 1059291 https://bugzilla.suse.com/1061407 SUSE Bug 1061407 https://bugzilla.suse.com/1062464 SUSE Bug 1062464 https://bugzilla.suse.com/1064520 SUSE Bug 1064520 https://bugzilla.suse.com/1075950 SUSE Bug 1075950 https://bugzilla.suse.com/1079048 SUSE Bug 1079048 https://bugzilla.suse.com/1081592 SUSE Bug 1081592 https://bugzilla.suse.com/1087055 SUSE Bug 1087055 https://bugzilla.suse.com/1087278 SUSE Bug 1087278 https://bugzilla.suse.com/1087581 SUSE Bug 1087581 https://bugzilla.suse.com/1087891 SUSE Bug 1087891 https://bugzilla.suse.com/1088888 SUSE Bug 1088888 https://bugzilla.suse.com/1089112 SUSE Bug 1089112 https://bugzilla.suse.com/1089362 SUSE Bug 1089362 https://bugzilla.suse.com/1089526 SUSE Bug 1089526 https://bugzilla.suse.com/1090242 SUSE Bug 1090242 https://bugzilla.suse.com/1091371 SUSE Bug 1091371 https://bugzilla.suse.com/1092161 SUSE Bug 1092161 https://bugzilla.suse.com/1092373 SUSE Bug 1092373 https://bugzilla.suse.com/1094055 SUSE Bug 1094055 https://bugzilla.suse.com/1097174 SUSE Bug 1097174 https://bugzilla.suse.com/1097413 SUSE Bug 1097413 https://www.suse.com/security/cve/CVE-2017-14695/ SUSE CVE CVE-2017-14695 page https://www.suse.com/security/cve/CVE-2017-14696/ SUSE CVE CVE-2017-14696 page SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Manager Proxy 3.0 SUSE Manager Proxy 3.1 SUSE Manager Server 3.0 SUSE Manager Server 3.1 SUSE Manager Tools 12 python2-salt-2018.3.0-46.28.1 python3-salt-2018.3.0-46.28.1 salt-2018.3.0-46.28.1 salt-doc-2018.3.0-46.28.1 salt-minion-2018.3.0-46.28.1 supportutils-plugin-salt-1.1.4-6.9.1 salt-api-2018.3.0-46.28.1 salt-bash-completion-2018.3.0-46.28.1 salt-cloud-2018.3.0-46.28.1 salt-master-2018.3.0-46.28.1 salt-proxy-2018.3.0-46.28.1 salt-ssh-2018.3.0-46.28.1 salt-syndic-2018.3.0-46.28.1 salt-zsh-completion-2018.3.0-46.28.1 python2-salt-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-api-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-bash-completion-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-cloud-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-doc-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-master-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-minion-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-proxy-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-ssh-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-syndic-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-zsh-completion-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 python2-salt-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-minion-2018.3.0-46.28.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 python2-salt-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-api-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-bash-completion-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-doc-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-master-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-minion-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-proxy-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-ssh-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-syndic-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 salt-zsh-completion-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.0 supportutils-plugin-salt-1.1.4-6.9.1 as a component of SUSE Manager Proxy 3.0 python2-salt-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.1 python3-salt-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.1 salt-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.1 salt-minion-2018.3.0-46.28.1 as a component of SUSE Manager Proxy 3.1 supportutils-plugin-salt-1.1.4-6.9.1 as a component of SUSE Manager Proxy 3.1 python2-salt-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-api-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-bash-completion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-doc-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-master-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-minion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-proxy-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-ssh-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-syndic-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 salt-zsh-completion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.0 supportutils-plugin-salt-1.1.4-6.9.1 as a component of SUSE Manager Server 3.0 python2-salt-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 python3-salt-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-api-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-bash-completion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-cloud-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-doc-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-master-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-minion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-proxy-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-ssh-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-syndic-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 salt-zsh-completion-2018.3.0-46.28.1 as a component of SUSE Manager Server 3.1 supportutils-plugin-salt-1.1.4-6.9.1 as a component of SUSE Manager Server 3.1 python2-salt-2018.3.0-46.28.1 as a component of SUSE Manager Tools 12 python3-salt-2018.3.0-46.28.1 as a component of SUSE Manager Tools 12 salt-2018.3.0-46.28.1 as a component of SUSE Manager Tools 12 salt-doc-2018.3.0-46.28.1 as a component of SUSE Manager Tools 12 salt-minion-2018.3.0-46.28.1 as a component of SUSE Manager Tools 12 supportutils-plugin-salt-1.1.4-6.9.1 as a component of SUSE Manager Tools 12 Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791. CVE-2017-14695 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:python2-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-api-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-doc-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-master-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-proxy-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-ssh-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-syndic-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Proxy 3.1:python2-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:python3-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Server 3.0:python2-salt-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-api-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-doc-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-master-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-minion-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-proxy-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-ssh-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-syndic-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Server 3.0:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Server 3.1:python2-salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:python3-salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-api-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-cloud-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-doc-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-master-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-minion-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-proxy-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-ssh-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-syndic-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Server 3.1:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Tools 12:python2-salt-2018.3.0-46.28.1 SUSE Manager Tools 12:python3-salt-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-doc-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-minion-2018.3.0-46.28.1 SUSE Manager Tools 12:supportutils-plugin-salt-1.1.4-6.9.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/ https://www.suse.com/security/cve/CVE-2017-14695.html CVE-2017-14695 https://bugzilla.suse.com/1053955 SUSE Bug 1053955 https://bugzilla.suse.com/1062462 SUSE Bug 1062462 SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request. CVE-2017-14696 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2018.3.0-46.28.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2018.3.0-46.28.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:python2-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-api-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-doc-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-master-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-proxy-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-ssh-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-syndic-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Proxy 3.0:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Proxy 3.1:python2-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:python3-salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:salt-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:salt-minion-2018.3.0-46.28.1 SUSE Manager Proxy 3.1:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Server 3.0:python2-salt-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-api-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-doc-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-master-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-minion-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-proxy-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-ssh-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-syndic-2018.3.0-46.28.1 SUSE Manager Server 3.0:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Server 3.0:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Server 3.1:python2-salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:python3-salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-api-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-bash-completion-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-cloud-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-doc-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-master-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-minion-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-proxy-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-ssh-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-syndic-2018.3.0-46.28.1 SUSE Manager Server 3.1:salt-zsh-completion-2018.3.0-46.28.1 SUSE Manager Server 3.1:supportutils-plugin-salt-1.1.4-6.9.1 SUSE Manager Tools 12:python2-salt-2018.3.0-46.28.1 SUSE Manager Tools 12:python3-salt-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-doc-2018.3.0-46.28.1 SUSE Manager Tools 12:salt-minion-2018.3.0-46.28.1 SUSE Manager Tools 12:supportutils-plugin-salt-1.1.4-6.9.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181757-1/ https://www.suse.com/security/cve/CVE-2017-14696.html CVE-2017-14696 https://bugzilla.suse.com/1053955 SUSE Bug 1053955 https://bugzilla.suse.com/1062464 SUSE Bug 1062464