File _patchinfo of Package patchinfo.8019
<patchinfo incident="8019">
<issue id="1027722" tracker="bnc">[Regression] Permission problem: salt-ssh minion boostrap doesn't work anymore.</issue>
<issue id="1038855" tracker="bnc">wrong use of os_family string for Suse in the locale module and others</issue>
<issue id="1002529" tracker="bnc">Cannot bootstrap a host using "Manage system completely via SSH (will not install an agent)"</issue>
<issue id="978150" tracker="bnc">add user to or replace members of group not working with SLES11 SPx</issue>
<issue id="991048" tracker="bnc">SLES-12-GA client fail to start salt minion (SUSE MANAGER 3.0)</issue>
<issue id="1012999" tracker="bnc">salt pkg.latest raises exception if package is not availible</issue>
<issue id="989193" tracker="bnc">pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty</issue>
<issue id="986019" tracker="bnc">SLES-12-SP1 salt-minion clients has no Base Channel added by default</issue>
<issue id="1017078" tracker="bnc">"The system requires a reboot" does not disappear from web-UI despite the reboot</issue>
<issue id="975733" tracker="bnc">Remove option -f from startproc</issue>
<issue id="1081592" tracker="bnc">[PYTHON2] package salt-minion requires /usr/bin/python</issue>
<issue id="1068566" tracker="bnc">Upgrading packages on RHEL6/7 client fails</issue>
<issue id="1071322" tracker="bnc">/var/log/salt has insecure permissions</issue>
<issue id="1011304" tracker="bnc">[Minion-bootstrapping] Invalid char cause server (salt-master ERROR)</issue>
<issue id="1012398" tracker="bnc">VUL-1: CVE-2016-9639: salt: Possible information leak due to revoked keys still being used</issue>
<issue id="1053376" tracker="bnc">Bootstrapping SLES12 minion invalid</issue>
<issue id="1063419" tracker="bnc">Minions not correctly onboarded if Proxy has multiple FQDNs</issue>
<issue id="972311" tracker="bnc">salt --summary '*' <function> reporting "# of minions that did not return" wrongly</issue>
<issue id="1027044" tracker="bnc">RH-L3 SALT - Stacktrace if nscd package is not present when using nscd state</issue>
<issue id="989798" tracker="bnc">Inspector broken: no module "query" or "inspector" while querying or inspecting</issue>
<issue id="1027240" tracker="bnc">[ Regression ]Centos7 Minion remote command execution from gui or cli , minion not responding</issue>
<issue id="967803" tracker="bnc">SALT, minion_id generation doesn't match the newhostname</issue>
<issue id="1004723" tracker="bnc">Salt API server shuts down when SSH call with no matches is issued</issue>
<issue id="1030009" tracker="bnc">/var/log/salt/minion fails logrotate</issue>
<issue id="975303" tracker="bnc">Salt proxy test.ping crashes</issue>
<issue id="985661" tracker="bnc">salt master flood log with useless messages</issue>
<issue id="1041993" tracker="bnc">After bootstrap salt client has deprecation warnings</issue>
<issue id="1064520" tracker="bnc">Head: salt 2017.7.2 starts salt-master as user root</issue>
<issue id="1053955" tracker="bnc">VUL-0: CVE-2017-12791: salt: Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master</issue>
<issue id="1079048" tracker="bnc">salt-2017.7.2 - broken %post script for salt-master</issue>
<issue id="1059291" tracker="bnc">Tearing down deployment with SaltStack Kubernetes module always shows error</issue>
<issue id="988506" tracker="bnc">lvm.vg_present does not recognize PV with certain LVM filter settings.</issue>
<issue id="1065792" tracker="bnc">High state fails: No service execution module loaded: check support for service</issue>
<issue id="972490" tracker="bnc">When multiple versions of a package are installed on a minion, patch status may vary</issue>
<issue id="1075950" tracker="bnc">Salt cp.push does not work on SUMA 3.2 Builds because of python3.4</issue>
<issue id="1008933" tracker="bnc">timezone modue does not update /etc/sysconfig/clock</issue>
<issue id="1052264" tracker="bnc">Add patches to salt to support SUSE Manager scalability features</issue>
<issue id="993039" tracker="bnc">salt-minion failed to start on minimal RHEL6 because of DBus exception during load of snapper module</issue>
<issue id="1050003" tracker="bnc">Permission denied: '/var/run/salt-master.pid'</issue>
<issue id="1036125" tracker="bnc">Jobs scheduled to run at a future time stay pending for Salt minions</issue>
<issue id="1051948" tracker="bnc">Backport kubernetes-modules to salt</issue>
<issue id="1068446" tracker="bnc">After highstate: The minion function caused an exception</issue>
<issue id="1062462" tracker="bnc">VUL-0: CVE-2017-14695: salt: directory traversal vulnerability in minion id validation</issue>
<issue id="1022841" tracker="bnc">unable to update salt-minion on RHEL</issue>
<issue id="983512" tracker="bnc">Nodes run out of memory due to salt-minion process</issue>
<issue id="1039370" tracker="bnc">[Proxy] "Broken pipe" during bootstrap of salt minion</issue>
<issue id="999852" tracker="bnc">incorrect return code from /etc/rc.d/salt-minion</issue>
<issue id="1011800" tracker="bnc">VUL-1: CVE-2017-5200: salt: Salt-ssh via api let's run arbitrary commands as user salt</issue>
<issue id="1060230" tracker="bnc">beacons.conf on salt-minion not processed</issue>
<issue id="975093" tracker="bnc">SLES11 SP3 salt-minion Client Cannot Select Base Channel</issue>
<issue id="1019386" tracker="bnc">salt-ssh sys.doc gives authentication failure without arguments</issue>
<issue id="990439" tracker="bnc">minion bootstrapping: error when bootstrap SLE11 clients</issue>
<issue id="975757" tracker="bnc">Certificate Deployment Fails for SLES11 SP3 Clients</issue>
<issue id="1025896" tracker="bnc">state.module run() does not translate varargs</issue>
<issue id="2017-12791" tracker="cve" />
<issue id="2016-9639" tracker="cve" />
<issue id="2017-14696" tracker="cve" />
<issue id="2017-14695" tracker="cve" />
<issue id="2017-5200" tracker="cve" />
<issue id="320559" tracker="fate" />
<category>security</category>
<rating>moderate</rating>
<packager>brejoc</packager>
<description>This update for salt fixes the following issues:
- [Regression] Permission problem: salt-ssh minion boostrap doesn't work anymore. (bsc#1027722)
- wrong use of os_family string for Suse in the locale module and others (bsc#1038855)
- Cannot bootstrap a host using "Manage system completely via SSH (will not install an agent)" (bsc#1002529)
- add user to or replace members of group not working with SLES11 SPx (bsc#978150)
- SLES-12-GA client fail to start salt minion (SUSE MANAGER 3.0) (bsc#991048)
- salt pkg.latest raises exception if package is not availible (bsc#1012999)
- pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty (bsc#989193)
- SLES-12-SP1 salt-minion clients has no Base Channel added by default (bsc#986019)
- "The system requires a reboot" does not disappear from web-UI despite the reboot (bsc#1017078)
- Remove option -f from startproc (bsc#975733)
- [PYTHON2] package salt-minion requires /usr/bin/python (bsc#1081592)
- Upgrading packages on RHEL6/7 client fails (bsc#1068566)
- /var/log/salt has insecure permissions (bsc#1071322)
- [Minion-bootstrapping] Invalid char cause server (salt-master ERROR) (bsc#1011304)
- CVE-2016-9639: Possible information leak due to revoked keys still being used (bsc#1012398)
- Bootstrapping SLES12 minion invalid (bsc#1053376)
- Minions not correctly onboarded if Proxy has multiple FQDNs (bsc#1063419)
- salt --summary '*' <function> reporting "# of minions that did not return" wrongly (bsc#972311)
- RH-L3 SALT - Stacktrace if nscd package is not present when using nscd state (bsc#1027044)
- Inspector broken: no module "query" or "inspector" while querying or inspecting (bsc#989798)
- [ Regression ]Centos7 Minion remote command execution from gui or cli , minion not responding (bsc#1027240)
- SALT, minion_id generation doesn't match the newhostname (bsc#967803)
- Salt API server shuts down when SSH call with no matches is issued (bsc#1004723)
- /var/log/salt/minion fails logrotate (bsc#1030009)
- Salt proxy test.ping crashes (bsc#975303)
- salt master flood log with useless messages (bsc#985661)
- After bootstrap salt client has deprecation warnings (bsc#1041993)
- Head: salt 2017.7.2 starts salt-master as user root (bsc#1064520)
- CVE-2017-12791: Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master (bsc#1053955)
- salt-2017.7.2 - broken %post script for salt-master (bsc#1079048)
- Tearing down deployment with SaltStack Kubernetes module always shows error (bsc#1059291)
- lvm.vg_present does not recognize PV with certain LVM filter settings. (bsc#988506)
- High state fails: No service execution module loaded: check support for service (bsc#1065792)
- When multiple versions of a package are installed on a minion, patch status may vary (bsc#972490)
- Salt cp.push does not work on SUMA 3.2 Builds because of python3.4 (bsc#1075950)
- timezone modue does not update /etc/sysconfig/clock (bsc#1008933)
- Add patches to salt to support SUSE Manager scalability features (bsc#1052264)
- salt-minion failed to start on minimal RHEL6 because of DBus exception during load of snapper module (bsc#993039)
- Permission denied: '/var/run/salt-master.pid' (bsc#1050003)
- Jobs scheduled to run at a future time stay pending for Salt minions (bsc#1036125)
- Backport kubernetes-modules to salt (bsc#1051948)
- After highstate: The minion function caused an exception (bsc#1068446)
- VUL-0: CVE-2017-14695: salt: directory traversal vulnerability in minion id validation (bsc#1062462)
- unable to update salt-minion on RHEL (bsc#1022841)
- Nodes run out of memory due to salt-minion process (bsc#983512)
- [Proxy] "Broken pipe" during bootstrap of salt minion (bsc#1039370)
- incorrect return code from /etc/rc.d/salt-minion (bsc#999852)
- CVE-2017-5200: Salt-ssh via api let's run arbitrary commands as user salt (bsc#1011800)
- beacons.conf on salt-minion not processed (bsc#1060230)
- SLES11 SP3 salt-minion Client Cannot Select Base Channel (bsc#975093)
- salt-ssh sys.doc gives authentication failure without arguments (bsc#1019386)
- minion bootstrapping: error when bootstrap SLE11 clients (bsc#990439)
- Certificate Deployment Fails for SLES11 SP3 Clients (bsc#975757)
- state.module run() does not translate varargs (bsc#1025896)
</description>
<summary>Security update for salt</summary>
</patchinfo>
