Security update for salt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1147-1 Final 1 1 2020-04-29T20:53:49Z current 2020-04-29T20:53:49Z 2020-04-29T20:53:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for salt This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-Azure-BYOS-2020-1147,Image SLES12-SP4-EC2-HVM-BYOS-2020-1147,Image SLES12-SP4-GCE-BYOS-2020-1147,Image SLES12-SP4-SAP-Azure-BYOS-2020-1147,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2020-1147,Image SLES12-SP4-SAP-GCE-BYOS-2020-1147,Image SLES12-SP5-Azure-BYOS-2020-1147,Image SLES12-SP5-Azure-HPC-BYOS-2020-1147,Image SLES12-SP5-Azure-SAP-BYOS-2020-1147,Image SLES12-SP5-EC2-BYOS-2020-1147,Image SLES12-SP5-EC2-SAP-BYOS-2020-1147,Image SLES12-SP5-GCE-BYOS-2020-1147,Image SLES12-SP5-GCE-SAP-BYOS-2020-1147,SUSE-2020-1147,SUSE-SLE-Manager-Tools-12-2020-1147,SUSE-SLE-Module-Adv-Systems-Management-12-2020-1147,SUSE-SLE-POS-12-SP2-2020-1147,SUSE-SUSE-Manager-Proxy-3.2-2020-1147,SUSE-SUSE-Manager-Server-3.2-2020-1147 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201147-1/ Link for SUSE-SU-2020:1147-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006764.html E-Mail link for SUSE-SU-2020:1147-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1170595 SUSE Bug 1170595 https://www.suse.com/security/cve/CVE-2020-11651/ SUSE CVE CVE-2020-11651 page https://www.suse.com/security/cve/CVE-2020-11652/ SUSE CVE CVE-2020-11652 page Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-SAP-BYOS SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Manager Proxy 3.2 SUSE Manager Server 3.2 SUSE Manager Tools 12 python2-salt-2019.2.0-46.91.1 salt-2019.2.0-46.91.1 salt-minion-2019.2.0-46.91.1 python3-salt-2019.2.0-46.91.1 salt-api-2019.2.0-46.91.1 salt-bash-completion-2019.2.0-46.91.1 salt-cloud-2019.2.0-46.91.1 salt-doc-2019.2.0-46.91.1 salt-fish-completion-2019.2.0-46.91.1 salt-master-2019.2.0-46.91.1 salt-proxy-2019.2.0-46.91.1 salt-ssh-2019.2.0-46.91.1 salt-standalone-formulas-configuration-2019.2.0-46.91.1 salt-syndic-2019.2.0-46.91.1 salt-zsh-completion-2019.2.0-46.91.1 python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-Azure-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-Azure-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-Azure-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-GCE-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-GCE-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-GCE-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-BYOS python2-salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS salt-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS salt-minion-2019.2.0-46.91.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python2-salt-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-api-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-bash-completion-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-cloud-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-doc-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-master-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-minion-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-proxy-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-ssh-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-standalone-formulas-configuration-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-syndic-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-zsh-completion-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 python2-salt-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-minion-2019.2.0-46.91.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 python2-salt-2019.2.0-46.91.1 as a component of SUSE Manager Proxy 3.2 python3-salt-2019.2.0-46.91.1 as a component of SUSE Manager Proxy 3.2 salt-2019.2.0-46.91.1 as a component of SUSE Manager Proxy 3.2 salt-minion-2019.2.0-46.91.1 as a component of SUSE Manager Proxy 3.2 python2-salt-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 python3-salt-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-api-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-bash-completion-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-cloud-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-doc-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-master-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-minion-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-proxy-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-ssh-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-standalone-formulas-configuration-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-syndic-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 salt-zsh-completion-2019.2.0-46.91.1 as a component of SUSE Manager Server 3.2 python2-salt-2019.2.0-46.91.1 as a component of SUSE Manager Tools 12 python3-salt-2019.2.0-46.91.1 as a component of SUSE Manager Tools 12 salt-2019.2.0-46.91.1 as a component of SUSE Manager Tools 12 salt-doc-2019.2.0-46.91.1 as a component of SUSE Manager Tools 12 salt-minion-2019.2.0-46.91.1 as a component of SUSE Manager Tools 12 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions. CVE-2020-11651 Image SLES12-SP4-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:salt-minion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-standalone-formulas-configuration-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:python2-salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:python3-salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:salt-minion-2019.2.0-46.91.1 SUSE Manager Server 3.2:python2-salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:python3-salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-api-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-bash-completion-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-cloud-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-doc-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-master-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-minion-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-proxy-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-ssh-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-standalone-formulas-configuration-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-syndic-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-zsh-completion-2019.2.0-46.91.1 SUSE Manager Tools 12:python2-salt-2019.2.0-46.91.1 SUSE Manager Tools 12:python3-salt-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-doc-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-minion-2019.2.0-46.91.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201147-1/ https://www.suse.com/security/cve/CVE-2020-11651.html CVE-2020-11651 https://bugzilla.suse.com/1170595 SUSE Bug 1170595 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users. CVE-2020-11652 Image SLES12-SP4-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-EC2-HVM-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP4-SAP-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-HPC-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-Azure-SAP-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-EC2-SAP-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-BYOS:salt-minion-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:python2-salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:salt-2019.2.0-46.91.1 Image SLES12-SP5-GCE-SAP-BYOS:salt-minion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-standalone-formulas-configuration-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2019.2.0-46.91.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2019.2.0-46.91.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:python2-salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:python3-salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:salt-2019.2.0-46.91.1 SUSE Manager Proxy 3.2:salt-minion-2019.2.0-46.91.1 SUSE Manager Server 3.2:python2-salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:python3-salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-api-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-bash-completion-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-cloud-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-doc-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-master-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-minion-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-proxy-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-ssh-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-standalone-formulas-configuration-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-syndic-2019.2.0-46.91.1 SUSE Manager Server 3.2:salt-zsh-completion-2019.2.0-46.91.1 SUSE Manager Tools 12:python2-salt-2019.2.0-46.91.1 SUSE Manager Tools 12:python3-salt-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-doc-2019.2.0-46.91.1 SUSE Manager Tools 12:salt-minion-2019.2.0-46.91.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201147-1/ https://www.suse.com/security/cve/CVE-2020-11652.html CVE-2020-11652 https://bugzilla.suse.com/1170595 SUSE Bug 1170595