{"affected":[{"ecosystem_specific":{"binaries":[{"python3-salt":"3006.0-150100.112.1","salt":"3006.0-150100.112.1","salt-api":"3006.0-150100.112.1","salt-bash-completion":"3006.0-150100.112.1","salt-cloud":"3006.0-150100.112.1","salt-doc":"3006.0-150100.112.1","salt-fish-completion":"3006.0-150100.112.1","salt-master":"3006.0-150100.112.1","salt-minion":"3006.0-150100.112.1","salt-proxy":"3006.0-150100.112.1","salt-ssh":"3006.0-150100.112.1","salt-standalone-formulas-configuration":"3006.0-150100.112.1","salt-syndic":"3006.0-150100.112.1","salt-transactional-update":"3006.0-150100.112.1","salt-zsh-completion":"3006.0-150100.112.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"salt","purl":"purl:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3006.0-150100.112.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-salt":"3006.0-150100.112.1","salt":"3006.0-150100.112.1","salt-api":"3006.0-150100.112.1","salt-bash-completion":"3006.0-150100.112.1","salt-cloud":"3006.0-150100.112.1","salt-doc":"3006.0-150100.112.1","salt-fish-completion":"3006.0-150100.112.1","salt-master":"3006.0-150100.112.1","salt-minion":"3006.0-150100.112.1","salt-proxy":"3006.0-150100.112.1","salt-ssh":"3006.0-150100.112.1","salt-standalone-formulas-configuration":"3006.0-150100.112.1","salt-syndic":"3006.0-150100.112.1","salt-transactional-update":"3006.0-150100.112.1","salt-zsh-completion":"3006.0-150100.112.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","name":"salt","purl":"purl:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3006.0-150100.112.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-salt":"3006.0-150100.112.1","salt":"3006.0-150100.112.1","salt-api":"3006.0-150100.112.1","salt-bash-completion":"3006.0-150100.112.1","salt-cloud":"3006.0-150100.112.1","salt-doc":"3006.0-150100.112.1","salt-fish-completion":"3006.0-150100.112.1","salt-master":"3006.0-150100.112.1","salt-minion":"3006.0-150100.112.1","salt-proxy":"3006.0-150100.112.1","salt-ssh":"3006.0-150100.112.1","salt-standalone-formulas-configuration":"3006.0-150100.112.1","salt-syndic":"3006.0-150100.112.1","salt-transactional-update":"3006.0-150100.112.1","salt-zsh-completion":"3006.0-150100.112.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","name":"salt","purl":"purl:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3006.0-150100.112.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)\n\nBugs fixed:\n\n- Fix optimization_order opt to prevent testsuite fails\n- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)\n- Use salt-call from salt bundle with transactional_update\n- Only call native_str on curl_debug message in tornado when needed\n- Implement the calling for batch async from the salt CLI\n- Fix calculation of SLS context vars when trailing dots\n  on targetted sls/state (bsc#1213518)\n- Rename salt-tests to python3-salt-testsuite\n- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)\n- Allow all primitive grain types for autosign_grains (bsc#1214477)\n","id":"SUSE-SU-2023:4390-1","modified":"2023-11-09T02:37:25Z","published":"2023-11-09T02:37:25Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234390-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213293"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214477"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215157"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-34049"}],"related":["CVE-2023-34049"],"summary":"Security update for salt"}