Summary
This update for Salt fixes one security issue and several non-security issues.
The following security issue has been fixed:
- Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)
The following non-security issues have been fixed:
- Update to 2015.8.12
- Add pre-require to salt for minions.
- Do not restart salt-minion in salt package.
- Add try-restart to sys-v init scripts.
- Add 'Restart=on-failure' for salt-minion systemd service.
- Various fixes for signal handling.
- Successfully exit of salt-api child processes when SIGTERM is received.
- Re-introduce 'KillMode=process' for salt-minion systemd service.
- Fix changing default-timezone. (bsc#1008933)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 3 | salt | 2015.8.12-27.5 |
| SUSE · Linux Enterprise Point of Sale 12 SP2 | salt | 2015.8.12-27.5 |
| SUSE · Manager Client Tools 12 | salt | 2015.8.12-27.5 |
| SUSE · Manager Proxy 3.0 | salt | 2015.8.12-27.5 |
| SUSE · Manager Server 3.0 | salt | 2015.8.12-27.5 |
Vulnerabilities 1
-
Critical 9.1
Salt allows deleted minions to read or write to minions with the same id
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.