SUSE-SU-2023:2585-1
Security update for salt and python-pyzmq
No scoreFix available
SUSE-SU-2023:2585-1 is a vulnerability with no CVSS score yet in python-pyzmq, published June 21, 2023. No source lists public exploit code. Fixed in python-pyzmq 17.1.2-150000.3.5.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
17.1.2-150000.3.5.2python-pyzmq +28 more
Description
This update for salt and python-pyzmq fixes the following issues:
salt:
- Update to Salt release version 3006.0 (jsc#PED-4361)
- See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
python-pyzmq:
- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyzmqSUSE:Linux Enterprise Micro 5.3 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Micro 5.4 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Module for Basesystem 15 SP5 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Module for Package Hub 15 SP5 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
saltSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | before 3006.0-150000.97.2 | 3006.0-150000.97.2 |
python-pyzmqSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
Show 19 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-pyzmqSUSE:Linux Enterprise Real Time 15 SP3 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Server 15 SP1-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
saltSUSE:Linux Enterprise Server 15 SP1-LTSS | before 3006.0-150000.97.2 | 3006.0-150000.97.2 |
python-pyzmqSUSE:Linux Enterprise Server 15 SP2-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Server 15 SP3-LTSS | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Server for SAP Applications 15 SP1 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
saltSUSE:Linux Enterprise Server for SAP Applications 15 SP1 | before 3006.0-150000.97.2 | 3006.0-150000.97.2 |
python-pyzmqSUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Manager Proxy 4.2 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Manager Server 4.2 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Micro 5.1 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Linux Enterprise Micro 5.2 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Enterprise Storage 7 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqSUSE:Enterprise Storage 7.1 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqopenSUSE:Leap Micro 5.3 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqopenSUSE:Leap Micro 5.4 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqopenSUSE:Leap 15.4 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
python-pyzmqopenSUSE:Leap 15.5 | before 17.1.2-150000.3.5.2 | 17.1.2-150000.3.5.2 |
What each source reports
OSVNo score
Security update for salt and python-pyzmq
This update for salt and python-pyzmq fixes the following issues:
salt:
- Update to Salt release version 3006.0 (jsc#PED-4361)
- See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
python-pyzmq:
- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
- Record
SUSE-SU-2023:2585-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.