CVE-2020-28972

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports:
  • Fix virtual network generated DNS XML for SRV records
  • Don't add spicevmc channel to xen VMs
• virt UEFI fix: virt.update when efi=True

This update was imported from the SUSE:SLE-15-SP2:Update update project.

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.

This update for SUSE Manager 4.0.12.1 Release Notes provides the following additions:

Release notes for SUSE Manager:

• Revision 4.0.12.1
• Bugs mentioned bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144

Release notes for SUSE Manager proxy:

• Update to 4.0.12.1
• Bugs mentioned bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144

This update for SUSE Manager 4.1.5.1 Release Notes provides the following additions:

Release notes for SUSE Manager:

• Revision 4.1.5.1
• Bugs mentioned bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144

Release notes for SUSE Manager proxy:

• Revision 4.1.5.1 bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144

This update for py26-compat-salt fixes the following issues:

• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)

This update for py26-compat-salt fixes the following issues:

• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports:
  • Fix virtual network generated DNS XML for SRV records
  • Don't add spicevmc channel to xen VMs
• virt UEFI fix: virt.update when efi=True

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports:
  • Fix virtual network generated DNS XML for SRV records
  • Don't add spicevmc channel to xen VMs
• virt UEFI fix: virt.update when efi=True

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports:
  • Fix virtual network generated DNS XML for SRV records
  • Don't add spicevmc channel to xen VMs
• virt UEFI fix: virt.update when efi=True

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports: Fix virtual network generated DNS XML for SRV records Don't add spicevmc channel to xen VMs
• virt UEFI fix: virt.update when efi=True

This update fixes the following issues:

salt:

• virt.network_update: handle missing ipv4 netmask attribute
• Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
• Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
• Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
• Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
• Always require python-certifi (used by salt.ext.tornado)
• Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
• Master can read grains (bsc#1179696)

This update fixes the following issues:

salt:

• Only require python-certifi for CentOS7
• Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
• Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
• Fix recursion false detection in payload (bsc#1180101)
• Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
• Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
• Always require python-certifi (used by salt.ext.tornado)
• Exclude SLE 12 from requiring python-certifi
• Do not crash when unexpected cmd output at listing patches (bsc#1181290)
• Fix behavior for 'onlyif/unless' when multiple conditions (bsc#1180818)
• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• Virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports: Fix virtual network generated DNS XML for SRV records Don't add spicevmc channel to xen VMs
• Virt UEFI fix: virt.update when efi=True
• Master can read grains (bsc#1179696)

This update for salt fixes the following issues:

• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)

This update fixes the following issues:

salt:

• Update to Salt release version 3002.2 (jsc#ECO-3212)
• Drop support for Python2. Obsoletes 'python2-salt' package
• Virt module updates
  • network: handle missing ipv4 netmask attribute
  • more network support
  • PCI/USB host devices passthrough support
• Set distro requirement to oldest supported version in requirements/base.txt
• Bring missing part of async batch implementation back
• Always require python3-distro (bsc#1182293)
• Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing
• Remove msgpack < 1.0.0 from base requirements (bsc#1176293)
• Msgpack support for version >= 1.0.0 (bsc#1171257)
• Fix issue parsing errors in ansiblegate state module
• Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
• Transactional_update: detect recursion in the executor
• Add subpackage salt-transactional-update
• Remove duplicate directories from specfile
• Improvements on 'ansiblegate' module (bsc#1185092):
  • New methods: ansible.targets / ansible.discover_playbooks
• Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
• Regression fix of salt-ssh on processing targets
• Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281)
• Add notify beacon for Debian/Ubuntu systems
• Fix zmq bug that causes salt-call to freeze (bsc#1181368)
• Add core grains support for AlmaLinux
• Allow vendor change option with zypper
• Virt: virtual network backports to Salt 3000
• Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
• Only require python-certifi for CentOS7
• Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
• Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
• Fix recursion false detection in payload (bsc#1180101)
• Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
• Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
• Always require python-certifi (used by salt.ext.tornado)
• Exclude SLE 12 from requiring python-certifi
• Do not crash when unexpected cmd output at listing patches (bsc#1181290)
• Fix behavior for 'onlyif/unless' when multiple conditions (bsc#1180818)
• Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
• Allow extra_filerefs as sanitized kwargs for SSH client
• Fix errors with virt.update
• Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
• Virt: search for grub.xen path
• Xen spicevmc, DNS SRV records backports: Fix virtual network generated DNS XML for SRV records Don't add spicevmc channel to xen VMs
• Virt UEFI fix: virt.update when efi=True
• Revert wrong zypper patch to support vendorchanges flags on pkg.install

It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary commands. (CVE-2020-16846)

It was discovered that Salt incorrectly created certificates with weak file permissions. (CVE-2020-17490)

It was discovered that Salt incorrectly handled credential validation. A remote attacker could possibly use this issue to bypass authentication. (CVE-2020-25592)

It was discovered that Salt incorrectly handled crafted process names. An attacker could possibly use this issue to run arbitrary commands. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-28243)

It was discovered that Salt incorrectly handled validation of SSL/TLS certificates. A remote attacker could possibly use this issue to spoof a trusted entity. (CVE-2020-28972, CVE-2020-35662)

It was discovered that Salt incorrectly handled credential validation. A remote attacker could possibly use this issue to run arbitrary code. (CVE-2021-25281)

It was discovered that Salt incorrectly handled crafted paths. A remote attacker could possibly use this issue to perform directory traversal. (CVE-2021-25282)

It was discovered that Salt incorrectly handled template rendering. A remote attacker could possibly this issue to run arbitrary code. (CVE-2021-25283)

It was discovered that Salt incorrectly handled logging. An attacker could possibly use this issue to discover credentials. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-25284)

It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary commands. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3148)

It was discovered that Salt incorrectly handled input sanitization. A remote attacker could possibly use this issue to run arbitrary commands. (CVE-2021-3197)