File _patchinfo of Package patchinfo.19536

<patchinfo incident="19536">
  <zypp_restart_needed/>
  <rating>important</rating>
  <packager>juliogonzalezgil</packager>
  <category>security</category>
  <summary>Security update for Salt</summary>
  <description>This update fixes the following issues:

salt:

- Parsing Epoch out of version provided during pkg remove (bsc#1173692)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- Transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update
- Remove duplicate directories from specfile
- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Regression fix of salt-ssh on processing targets
- Update target fix for salt-ssh and avoiding race condition
  on salt-ssh event processing (bsc#1179831, bsc#1182281)
- Add notify beacon for Debian/Ubuntu systems
- Fix zmq bug that causes salt-call to freeze (bsc#1181368)

</description>
  <issue tracker="bnc" id="1173692">Can't remove a package in CentOS6 and CentOS7 Salt, due to a bad behavior of yum</issue>
  <issue tracker="bnc" id="1179831">Scheduled SSH-Push Tasks throws Exception and cause Salt-API to fail</issue>
  <issue tracker="bnc" id="1181368">L3: Ubuntu salt-minion freezes running salt-call state.apply</issue>
  <issue tracker="bnc" id="1182281">SSH-Push/Salt-SSH "Adding minions for job xyz: [None]" cause unhandled Exception and salt-api to crash</issue>
  <issue tracker="bnc" id="1185092">Required Salt "ansiblegate" improvements for SUSE Manager 4.2 are missing on SLE15SP3:GA</issue>
  <issue tracker="bnc" id="1185281">VUL-0: CVE-2021-31607: salt: Command injection in the snapper module</issue>
  <issue tracker="cve" id="2021-31607"/>
</patchinfo>
openSUSE Build Service is sponsored by