SUSE-SU-2023:2571-1
Security update for Salt
No scoreFix available
SUSE-SU-2023:2571-1 is a vulnerability with no CVSS score yet in python-jmespath, published June 21, 2023. No source lists public exploit code. Fixed in python-jmespath 0.9.3-150000.3.3.4.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.9.3-150000.3.3.4python-jmespath +73 more
Description
This update for salt fixes the following issues:
salt:
- Update to Salt release version 3006.0 (jsc#PED-4361)
- See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
python-jmespath:
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt (no source changes)
python-ply:
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath (no source changes)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-jmespathSUSE:Linux Enterprise Micro 5.3 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Micro 5.3 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Micro 5.3 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
saltSUSE:Linux Enterprise Micro 5.3 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathSUSE:Linux Enterprise Micro 5.4 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Micro 5.4 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Micro 5.4 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
saltSUSE:Linux Enterprise Micro 5.4 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathSUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-simplejsonSUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
saltSUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathSUSE:Linux Enterprise Module for Basesystem 15 SP5 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Module for Basesystem 15 SP5 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Module for Basesystem 15 SP5 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Module for Package Hub 15 SP4 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise Module for Package Hub 15 SP5 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
saltSUSE:Linux Enterprise Module for Server Applications 15 SP4 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
saltSUSE:Linux Enterprise Module for Transactional Server 15 SP4 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Real Time 15 SP3 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Real Time 15 SP3 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Real Time 15 SP3 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Server 15 SP1-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server 15 SP1-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise Server 15 SP2-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server 15 SP2-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise Server 15 SP3-LTSS | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server 15 SP3-LTSS | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Server 15 SP3-LTSS | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Server for SAP Applications 15 SP1 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server for SAP Applications 15 SP1 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Manager Proxy 4.2 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Manager Proxy 4.2 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Manager Proxy 4.2 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Manager Server 4.2 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Manager Server 4.2 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Manager Server 4.2 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Micro 5.1 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Micro 5.1 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Micro 5.1 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Linux Enterprise Micro 5.2 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Linux Enterprise Micro 5.2 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Linux Enterprise Micro 5.2 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathSUSE:Enterprise Storage 7 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Enterprise Storage 7 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-jmespathSUSE:Enterprise Storage 7.1 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plySUSE:Enterprise Storage 7.1 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonSUSE:Enterprise Storage 7.1 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
python-jmespathopenSUSE:Leap Micro 5.3 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plyopenSUSE:Leap Micro 5.3 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonopenSUSE:Leap Micro 5.3 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
saltopenSUSE:Leap Micro 5.3 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathopenSUSE:Leap 15.4 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plyopenSUSE:Leap 15.4 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonopenSUSE:Leap 15.4 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
saltopenSUSE:Leap 15.4 | before 3006.0-150400.8.34.2 | 3006.0-150400.8.34.2 |
python-jmespathopenSUSE:Leap 15.5 | before 0.9.3-150000.3.3.4 | 0.9.3-150000.3.3.4 |
python-plyopenSUSE:Leap 15.5 | before 3.10-150000.3.3.4 | 3.10-150000.3.3.4 |
python-simplejsonopenSUSE:Leap 15.5 | before 3.17.2-150300.3.2.3 | 3.17.2-150300.3.2.3 |
What each source reports
OSVNo score
Security update for Salt
This update for salt fixes the following issues:
salt:
- Update to Salt release version 3006.0 (jsc#PED-4361)
- See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
python-jmespath:
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt (no source changes)
python-ply:
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath (no source changes)
- Record
SUSE-SU-2023:2571-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.