SUSE: CVE-2021-3144: SUSE Linux Security Advisory

Description
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
Solution(s)
suse-upgrade-python2-salt
suse-upgrade-python3-salt
suse-upgrade-salt
suse-upgrade-salt-api
suse-upgrade-salt-bash-completion
suse-upgrade-salt-cloud
suse-upgrade-salt-doc
suse-upgrade-salt-fish-completion
suse-upgrade-salt-master
suse-upgrade-salt-minion
suse-upgrade-salt-proxy
suse-upgrade-salt-ssh
suse-upgrade-salt-standalone-formulas-configuration
suse-upgrade-salt-syndic
suse-upgrade-salt-zsh-completion

References
SUSE-SU-2021:0619-1
SUSE-SU-2021:0624-1
SUSE-SU-2021:0625-1
SUSE-SU-2021:0626-1
SUSE-SU-2021:0627-1
SUSE-SU-2021:0628-1
SUSE-SU-2021:0630-1
SUSE-SU-2021:0631-1
SUSE-SU-2021:14646-1
SUSE-SU-2021:14647-1
SUSE-SU-2021:14649-1
SUSE-SU-2021:14650-1
CVE-2021-3144


View more