Security update for Salt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2104-1 Final 1 1 2021-06-21T17:24:36Z current 2021-06-21T17:24:36Z 2021-06-21T17:24:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for Salt This update fixes the following issues: salt: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) - Virt module updates * network: handle missing ipv4 netmask attribute * more network support * PCI/USB host devices passthrough support - Set distro requirement to oldest supported version in requirements/base.txt - Bring missing part of async batch implementation back (bsc#1182382, CVE-2021-25315) - Always require python3-distro (bsc#1182293) - Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing - Fix pkg states when DEB package has 'all' arch - Do not force beacons configuration to be a list. - Remove msgpack < 1.0.0 from base requirements (bsc#1176293) - Msgpack support for version >= 1.0.0 (bsc#1171257) - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607) - Transactional_update: detect recursion in the executor - Add subpackage salt-transactional-update (jsc#SLE-18033) - Remove duplicate directories from specfile - Improvements on 'ansiblegate' module (bsc#1185092): * New methods: ansible.targets / ansible.discover_playbooks - Add support for Alibaba Cloud Linux 2 (Aliyun Linux) - Regression fix of salt-ssh on processing targets - Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281) - Add notify beacon for Debian/Ubuntu systems - Fix zmq bug that causes salt-call to freeze (bsc#1181368) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SAP-Azure-BYOS-2021-2104,Image SLES15-SAP-EC2-HVM-BYOS-2021-2104,Image SLES15-SAP-GCE-BYOS-2021-2104,SUSE-2021-2104,SUSE-SLE-Product-HPC-15-2021-2104,SUSE-SLE-Product-SLES-15-2021-2104,SUSE-SLE-Product-SLES_SAP-15-2021-2104 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212104-1/ Link for SUSE-SU-2021:2104-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/009055.html E-Mail link for SUSE-SU-2021:2104-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1171257 SUSE Bug 1171257 https://bugzilla.suse.com/1176293 SUSE Bug 1176293 https://bugzilla.suse.com/1179831 SUSE Bug 1179831 https://bugzilla.suse.com/1181368 SUSE Bug 1181368 https://bugzilla.suse.com/1182281 SUSE Bug 1182281 https://bugzilla.suse.com/1182293 SUSE Bug 1182293 https://bugzilla.suse.com/1182382 SUSE Bug 1182382 https://bugzilla.suse.com/1185092 SUSE Bug 1185092 https://bugzilla.suse.com/1185281 SUSE Bug 1185281 https://bugzilla.suse.com/1186674 SUSE Bug 1186674 https://www.suse.com/security/cve/CVE-2021-25315/ SUSE CVE CVE-2021-25315 page https://www.suse.com/security/cve/CVE-2021-31607/ SUSE CVE CVE-2021-31607 page Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE-BYOS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 python3-salt-3002.2-8.41.8.1 salt-3002.2-8.41.8.1 salt-minion-3002.2-8.41.8.1 salt-api-3002.2-8.41.8.1 salt-bash-completion-3002.2-8.41.8.1 salt-cloud-3002.2-8.41.8.1 salt-doc-3002.2-8.41.8.1 salt-fish-completion-3002.2-8.41.8.1 salt-master-3002.2-8.41.8.1 salt-proxy-3002.2-8.41.8.1 salt-ssh-3002.2-8.41.8.1 salt-standalone-formulas-configuration-3002.2-8.41.8.1 salt-syndic-3002.2-8.41.8.1 salt-transactional-update-3002.2-8.41.8.1 salt-zsh-completion-3002.2-8.41.8.1 python3-salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-Azure-BYOS salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-Azure-BYOS salt-minion-3002.2-8.41.8.1 as a component of Image SLES15-SAP-Azure-BYOS python3-salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS salt-minion-3002.2-8.41.8.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS python3-salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-GCE-BYOS salt-3002.2-8.41.8.1 as a component of Image SLES15-SAP-GCE-BYOS salt-minion-3002.2-8.41.8.1 as a component of Image SLES15-SAP-GCE-BYOS python3-salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-api-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-bash-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-cloud-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-doc-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-fish-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-master-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-minion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-proxy-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-ssh-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-standalone-formulas-configuration-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-syndic-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-transactional-update-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS salt-zsh-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS python3-salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-api-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-bash-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-cloud-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-doc-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-fish-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-master-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-minion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-proxy-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-ssh-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-standalone-formulas-configuration-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-syndic-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-transactional-update-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS salt-zsh-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python3-salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-api-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-bash-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-cloud-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-doc-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-fish-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-master-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-minion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-proxy-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-ssh-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-standalone-formulas-configuration-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-syndic-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-transactional-update-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS salt-zsh-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS python3-salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-api-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-bash-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-cloud-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-doc-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-fish-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-master-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-minion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-proxy-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-ssh-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-standalone-formulas-configuration-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-syndic-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-transactional-update-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 salt-zsh-completion-3002.2-8.41.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. CVE-2021-25315 Image SLES15-SAP-Azure-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-Azure-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-Azure-BYOS:salt-minion-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:salt-minion-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-zsh-completion-3002.2-8.41.8.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212104-1/ https://www.suse.com/security/cve/CVE-2021-25315.html CVE-2021-25315 https://bugzilla.suse.com/1182382 SUSE Bug 1182382 In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely). CVE-2021-31607 Image SLES15-SAP-Azure-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-Azure-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-Azure-BYOS:salt-minion-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-EC2-HVM-BYOS:salt-minion-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:python3-salt-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:salt-3002.2-8.41.8.1 Image SLES15-SAP-GCE-BYOS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise Server 15-LTSS:salt-zsh-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:python3-salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-api-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-bash-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-cloud-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-doc-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-fish-completion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-master-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-minion-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-proxy-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-ssh-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-standalone-formulas-configuration-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-syndic-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-transactional-update-3002.2-8.41.8.1 SUSE Linux Enterprise Server for SAP Applications 15:salt-zsh-completion-3002.2-8.41.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212104-1/ https://www.suse.com/security/cve/CVE-2021-31607.html CVE-2021-31607 https://bugzilla.suse.com/1185281 SUSE Bug 1185281 https://bugzilla.suse.com/1210934 SUSE Bug 1210934