CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

These are all security issues fixed in the python3-salt-3002.2-6.1 package on the GA media of openSUSE Tumbleweed.

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

This update for Salt fixes one security issue and several non-security issues.

The following security issue has been fixed:

• Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)

The following non-security issues have been fixed:

• Update to 2015.8.12
• Add pre-require to salt for minions.
• Do not restart salt-minion in salt package.
• Add try-restart to sys-v init scripts.
• Add 'Restart=on-failure' for salt-minion systemd service.
• Various fixes for signal handling.
• Successfully exit of salt-api child processes when SIGTERM is received.
• Re-introduce 'KillMode=process' for salt-minion systemd service.
• Fix changing default-timezone. (bsc#1008933)

This update for Salt fixes one security issue and several non-security issues.

The following security issue has been fixed:

• Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)

The following non-security issues have been fixed:

• Update to 2015.8.12
• Add pre-require to salt for minions.
• Do not restart salt-minion in salt package.
• Add try-restart to sys-v init scripts.
• Add 'Restart=on-failure' for salt-minion systemd service.
• Re-introduce 'KillMode=process' for salt-minion systemd service.
• Successfully exit of salt-api child processes when SIGTERM is received.
• Fix exit codes of sysv init script. (bsc#999852)
• Include resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade.
• Fix Salt API crash via salt-ssh on empty roster. (bsc#1004723)
• Add 'dist-upgrade' support to zypper module. (fate#320559)
• Fix position of -X option to setfacl. (bsc#1004260)
• Fix generated shebang in scripts on SLES-ES 7. (bsc#1004047)
• Fix changing default-timezone. (bsc#1008933)

This update fixes the following issues:

osad:

• Fix logfile option for osa-dispatcher. (bsc#980752)

salt:

• Update to 2015.8.12
• Add pre-require to salt for minions.
• Do not restart salt-minion in salt package.
• Add try-restart to sys-v init scripts.
• Add 'Restart=on-failure' for salt-minion systemd service.
• Various fixes for signal handling.
• Successfully exit of salt-api child processes when SIGTERM is received.
• Re-introduce 'KillMode=process' for salt-minion systemd service.
• Fix setting default timezone. (bsc#1008933)
• Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)

spacewalk-backend:

• Handle non-unique machine_id after migrate from 2.1. (bsc#1013002)
• Refer to scc.suse.com instead of bugzilla.novell.com in case of problem. (bsc#967818)
• Fix selection of primary interface. (bsc#1009677)
• Add link from satellite-sync to mgr-inter-sync man page. (bsc#1009435)
• Reposync: Assign orphaned vendor packages to the default org. (bsc#995764)
• Add missing reference for bsc#996609

supportutils-plugin-susemanager-client:

• Include correct configuration file in the supportconfig.