Test ID:	1.3.6.1.4.1.25623.1.1.4.2020.1974.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2020:1974-1)
Summary:	The remote host is missing an update for the 'salt' package(s) announced via the SUSE-SU-2020:1974-1 advisory.
Description:	Summary: The remote host is missing an update for the 'salt' package(s) announced via the SUSE-SU-2020:1974-1 advisory. Vulnerability Insight: This update for salt contains the following fixes: Fix for TypeError in Tornado importer (bsc#1174165) Require python3-distro only for TW (bsc#1173072) Update to Salt version 3000: See release notes: [link moved to references] Add docker.logout to docker execution module. (bsc#1165572) Add option to enable/disable force refresh for zypper. Add publish_batch to ClearFuncs exposed methods. Adds test for zypper abbreviation fix. Avoid segfault from 'salt-api' under certain conditions of heavy load managing SSH minions. (bsc#1169604) Avoid traceback on debug logging for swarm module. (bsc#1172075) Batch mode now also correctly provides return value. (bsc#1168340) Better import cache handline. Do not make file.recurse state to fail when msgpack 0.5.4. (bsc#1167437) Do not require vendored backports-abc. (bsc#1170288) Fix errors from unit tests due NO_MOCK and NO_MOCK_REASON deprecation. Fix for low rpm_lowpkg unit test. Fix for temp folder definition in loader unit test. Fix for unless requisite when pip is not installed. Fix integration test failure for test_mod_del_repo_multiline_values. Fix regression in service states with reload argument. Fix tornado imports and missing _utils after rebasing patches. Fix status attribute issue in aptpkg test. Improved storage pool or network handling. loop: fix variable names for until_no_eval. Make 'salt.ext.tornado.gen' to use 'salt.ext.backports_abc' on Python 2. Make setup.py script not to require setuptools greater than 9.1. More robust remote port detection. Prevent sporious 'salt-api' stuck processes when managing SSH minions. because of logging deadlock. (bsc#1159284) Python3.8 compatibility changes. Removes unresolved merge conflict in yumpkg module. Returns a the list of IPs filtered by the optional network list. Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104) Sanitize grains loaded from roster_grains.json cache during 'state.pkg'. Various virt backports from 3000.2. zypperpkg: filter patterns that start with dot. (bsc#1171906) Affected Software/OS: 'salt' package(s) on SUSE Linux Enterprise Module for Basesystem 15-SP1, SUSE Linux Enterprise Module for Python2 15-SP1, SUSE Linux Enterprise Module for Server Applications 15-SP1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-15750 Common Vulnerability Exposure (CVE) ID: CVE-2018-15751 Common Vulnerability Exposure (CVE) ID: CVE-2020-11651 Common Vulnerability Exposure (CVE) ID: CVE-2020-11652
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.