Summary
This update fixes the following issues:
osad:
- Fix logfile option for osa-dispatcher. (bsc#980752)
salt:
- Update to 2015.8.12
- Add pre-require to salt for minions.
- Do not restart salt-minion in salt package.
- Add try-restart to sys-v init scripts.
- Add 'Restart=on-failure' for salt-minion systemd service.
- Various fixes for signal handling.
- Successfully exit of salt-api child processes when SIGTERM is received.
- Re-introduce 'KillMode=process' for salt-minion systemd service.
- Fix setting default timezone. (bsc#1008933)
- Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)
spacewalk-backend:
- Handle non-unique machine_id after migrate from 2.1. (bsc#1013002)
- Refer to scc.suse.com instead of bugzilla.novell.com in case of problem. (bsc#967818)
- Fix selection of primary interface. (bsc#1009677)
- Add link from satellite-sync to mgr-inter-sync man page. (bsc#1009435)
- Reposync: Assign orphaned vendor packages to the default org. (bsc#995764)
- Add missing reference for bsc#996609
supportutils-plugin-susemanager-client:
- Include correct configuration file in the supportconfig.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3-CLIENT-TOOLS | osad | 5.11.64.3-5.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3-CLIENT-TOOLS | salt | 2015.8.12-27.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3-CLIENT-TOOLS | spacewalk-backend | 2.5.24.7-16.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3-CLIENT-TOOLS | supportutils-plugin-susemanager-client | 3.0.5-5.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4-CLIENT-TOOLS | osad | 5.11.64.3-5.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4-CLIENT-TOOLS | salt | 2015.8.12-27.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4-CLIENT-TOOLS | spacewalk-backend | 2.5.24.7-16.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4-CLIENT-TOOLS | supportutils-plugin-susemanager-client | 3.0.5-5.1 |
Vulnerabilities 1
-
Critical 9.1
Salt allows deleted minions to read or write to minions with the same id
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
References
-
report
https://bugzilla.suse.com/1008933
-
report
https://bugzilla.suse.com/1009435
-
report
https://bugzilla.suse.com/1009677
-
report
https://bugzilla.suse.com/1012398
-
report
https://bugzilla.suse.com/1013002
-
report
https://bugzilla.suse.com/967818
-
report
https://bugzilla.suse.com/980752
-
report
https://bugzilla.suse.com/995764
-
report
https://bugzilla.suse.com/996609
-
web
https://www.suse.com/security/cve/CVE-2016-9639