{"affected":[{"ecosystem_specific":{"binaries":[{"venv-salt-minion":"3004-150000.3.11.1"}]},"package":{"ecosystem":"SUSE:Manager Tools 15","name":"venv-salt-minion","purl":"purl:rpm/suse/venv-salt-minion&distro=SUSE%20Manager%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"venv-salt-minion":"3004-150000.3.11.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy Module 4.3","name":"venv-salt-minion","purl":"purl:rpm/suse/venv-salt-minion&distro=SUSE%20Manager%20Proxy%20Module%204.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"venv-salt-minion":"3004-150000.3.11.1"}]},"package":{"ecosystem":"SUSE:Manager Server Module 4.3","name":"venv-salt-minion","purl":"purl:rpm/suse/venv-salt-minion&distro=SUSE%20Manager%20Server%20Module%204.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Add support for gpgautoimport in zypperpkg module\n- Update Salt to work with Jinja >= and <= 3.1.0 (bsc#1198744)\n- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)\n- Make Salt 3004 compatible with pyzmq >= 23.0.0 (bsc#1201082)\n- Add support for name, pkgs and diff_attr parameters to upgrade\n  function for zypper and yum (bsc#1198489)\n- Fix possible errors on running post install script\n  if semanage is present on the system, but SELinux is not configured\n- Remove unused imports in the venv wrappers\n- Set VENV_PIP_TARGET to /var/lib/venv-salt-minion/local\n  to force PIP use it as the destination to install modules\n- Fix ownership of salt thin directory when using the Salt Bundle\n- Set default target for pip from VENV_PIP_TARGET environment variable\n- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)\n- Save log to logfile with docker.build\n- Use Salt Bundle in dockermod\n- Ignore errors on reading license files with dpkg_lowpkg (bsc#1197288)\n- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)\n\n","id":"SUSE-SU-2022:3172-1","modified":"2022-09-08T07:29:45Z","published":"2022-09-08T07:29:45Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223172-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195895"},{"type":"REPORT","url":"https://bugzilla.suse.com/1197288"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198489"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198744"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199372"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200566"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201082"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-22967"}],"related":["CVE-2022-22967"],"summary":"Security update for SUSE Manager Salt Bundle"}