File _patchinfo of Package patchinfo.4757

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.4757

<patchinfo incident="4757">
  <packager>dmacvicar</packager>
  <issue tracker="bnc" id="958350">Salt crashes on invalid UTF-8 in package data</issue>
  <issue tracker="bnc" id="963322">salt-api cannot be stopped correctly</issue>
  <issue tracker="bnc" id="959572">"salt '*' pkg.info_installed" causes exception on sles12sp1 client</issue>
  <issue tracker="cve" id="CVE-2016-1866"></issue>
  <issue tracker="bnc" id="965403">VUL-0:: CVE-2016-1866: salt: Improper handling of clear messages on the minion remote code execution</issue>
  <category>security</category>
  <rating>moderate</rating>
  <summary>Security update for salt</summary>
  <description>
This update for salt fixes the following issues:

- CVE-2016-1866: Improper handling of clear messages on the minion remote code execution (boo#965403)

The following bugs were fixed:

- boo#958350: Salt crashes on invalid UTF-8 in package data
- boo#959572: "salt '*' pkg.info_installed" causes exception on sles12sp1 client
- boo#963322: salt-api cannot be stopped correctly
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.4757

Places