File _patchinfo of Package patchinfo.4856
<patchinfo incident="4856"> <zypp_restart_needed/> <rating>moderate</rating> <packager>mcalmer</packager> <category>security</category> <summary>Security update for Salt</summary> <description> This update for salt provides version 2016.11.4 and brings various fixes and improvements: - Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade. - Fix format error. (bsc#1043111) - Fix ownership for whole master cache directory. (bsc#1035914) - Disable 3rd party runtime packages to be explicitly recommended. (bsc#1040886) - Fix insecure permissions in salt-ssh temporary files. (bsc#1035912, CVE-2017-8109) - Disable custom rosters for Salt SSH via Salt API. (bsc#1011800, CVE-2017-5200) - Orchestrate and batches don't return false failed information anymore. - Speed-up cherrypy by removing sleep call. - Fix os_family grains on SUSE. (bsc#1038855) - Fix setting the language on SUSE systems. (bsc#1038855) - Use SUSE specific salt-api.service. (bsc#1039370) - Fix using hostname for minion ID as '127'. - Fix core grains constants for timezone. (bsc#1032931) - Minor fixes on new pkg.list_downloaded. - Listing all type of advisory patches for Yum module. - Prevents zero length error on Python 2.6. - Fixes zypper test error after backporting. - Raet protocol is no longer supported. (bsc#1020831) - Fix moving SSH data to the new home. (bsc#1027722) - Fix logrotating /var/log/salt/minion. (bsc#1030009) - Fix result of master_tops extension is mutually overwritten. (bsc#1030073) - Allows to set 'timeout' and 'gather_job_timeout' via kwargs. - Allows to set custom timeouts for 'manage.up' and 'manage.status'. - Use salt's ordereddict for comparison. - Fix scripts for salt-proxy. - Add openscap module. - File.get_managed regression fix. - Fix translate variable arguments if they contain hidden keywords. (bsc#1025896) - Added unit test for dockerng.sls_build dryrun. - Added dryrun to dockerng.sls_build. - Update dockerng minimal version requirements. - Fix format error in error parsing. - Keep fix for migrating salt home directory. (bsc#1022562) - Fix salt pkg.latest raises exception if package is not available. (bsc#1012999) - Timezone should always be in UTC. (bsc#1017078) - Fix timezone handling for rpm installtime. (bsc#1017078) - Increasing timeouts for running integrations tests. - Add buildargs option to dockerng.build module. - Fix error when missing ssh-option parameter. - Re-add yum notify plugin. - All kwargs to dockerng.create to provide all features to sls_build as well. - Datetime should be returned always in UTC. - Fix possible crash while deserialising data on infinite recursion in scheduled state. (bsc#1036125) - Documentation refresh to 2016.11.4 - For a detailed description, please refer to: + https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html + https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html + https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html + https://docs.saltstack.com/en/develop/topics/releases/2016.11.1.html </description> <issue id="323277" tracker="fate"/> <issue id="2017-5200" tracker="cve"/> <issue id="2017-8109" tracker="cve"/> <issue id="1035912" tracker="bnc">CVE-2017-8109: salt: salt-ssh temporary files - insecure permissions</issue> <issue id="1040584" tracker="bnc">[TRACKERBUG] FATE#323277: [ECO] Upgrade Salt to 2016.11.4</issue> <issue id="1011800" tracker="bnc">CVE-2017-5200: salt: Salt-ssh via api let's run arbitrary commands as user salt</issue> <issue id="1012999" tracker="bnc">salt pkg.latest raises exception if package is not availible</issue> <issue id="1017078" tracker="bnc">"The system requires a reboot" does not disappear from web-UI despite the reboot</issue> <issue id="1020831" tracker="bnc">salt-raet installation causes salt-master to crash</issue> <issue id="1022562" tracker="bnc">Regression: salt-ssh minion boostrap doesn't work anymore.</issue> <issue id="1025896" tracker="bnc">state.module run() does not translate varargs</issue> <issue id="1027240" tracker="bnc">[ Regression ]Centos7 Minion remote command execution from gui or cli , minion not responding</issue> <issue id="1027722" tracker="bnc">[Regression] Permission problem: salt-ssh minion boostrap doesn't work anymore.</issue> <issue id="1030009" tracker="bnc">/var/log/salt/minion fails logrotate</issue> <issue id="1030073" tracker="bnc">Result of master_tops extension is mutually overwritten</issue> <issue id="1032931" tracker="bnc">[Salt] timezone.get_zone does not work on SLE11</issue> <issue id="1036125" tracker="bnc">Jobs scheduled to run at a future time stay pending for Salt minions</issue> <issue id="1038855" tracker="bnc">wrong use of os_family string for Suse in the locale module and others</issue> <issue id="1039370" tracker="bnc">[Proxy] "Broken pipe" during bootstrap of salt minion</issue> <issue id="1040886" tracker="bnc"/> <issue id="1043111" tracker="bnc"/> <issue id="1035914" tracker="bnc"/> </patchinfo>
