Security update for salt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3862-1 Final 1 1 2018-11-22T15:13:59Z current 2018-11-22T15:13:59Z 2018-11-22T15:13:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for salt This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fix async call to process manager (bsc#1110938). - Fixed OS arch detection when RPM is not installed (bsc#1114197). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2018-2745,SUSE-SLE-Manager-Tools-12-2018-2745,SUSE-SLE-Module-Adv-Systems-Management-12-2018-2745,SUSE-SLE-POS-12-SP2-2018-2745,SUSE-SUSE-Manager-Proxy-3.0-2018-2745,SUSE-SUSE-Manager-Proxy-3.1-2018-2745,SUSE-SUSE-Manager-Proxy-3.2-2018-2745,SUSE-SUSE-Manager-Server-3.0-2018-2745,SUSE-SUSE-Manager-Server-3.1-2018-2745,SUSE-SUSE-Manager-Server-3.2-2018-2745 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183862-1/ Link for SUSE-SU-2018:3862-1 https://lists.suse.com/pipermail/sle-security-updates/2018-November/004871.html E-Mail link for SUSE-SU-2018:3862-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1110938 SUSE Bug 1110938 https://bugzilla.suse.com/1113698 SUSE Bug 1113698 https://bugzilla.suse.com/1113699 SUSE Bug 1113699 https://bugzilla.suse.com/1113784 SUSE Bug 1113784 https://bugzilla.suse.com/1114197 SUSE Bug 1114197 https://www.suse.com/security/cve/CVE-2018-15750/ SUSE CVE CVE-2018-15750 page https://www.suse.com/security/cve/CVE-2018-15751/ SUSE CVE CVE-2018-15751 page SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Manager Client Tools 12 SUSE Manager Proxy 3.0 SUSE Manager Proxy 3.1 SUSE Manager Proxy 3.2 SUSE Manager Server 3.0 SUSE Manager Server 3.1 SUSE Manager Server 3.2 python2-salt-2018.3.0-46.44.1 python3-salt-2018.3.0-46.44.1 salt-2018.3.0-46.44.1 salt-doc-2018.3.0-46.44.1 salt-minion-2018.3.0-46.44.1 salt-api-2018.3.0-46.44.1 salt-bash-completion-2018.3.0-46.44.1 salt-cloud-2018.3.0-46.44.1 salt-master-2018.3.0-46.44.1 salt-proxy-2018.3.0-46.44.1 salt-ssh-2018.3.0-46.44.1 salt-syndic-2018.3.0-46.44.1 salt-zsh-completion-2018.3.0-46.44.1 python2-salt-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-api-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-bash-completion-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-cloud-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-doc-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-master-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-minion-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-proxy-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-ssh-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-syndic-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-zsh-completion-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 python2-salt-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-minion-2018.3.0-46.44.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Client Tools 12 python3-salt-2018.3.0-46.44.1 as a component of SUSE Manager Client Tools 12 salt-2018.3.0-46.44.1 as a component of SUSE Manager Client Tools 12 salt-doc-2018.3.0-46.44.1 as a component of SUSE Manager Client Tools 12 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Client Tools 12 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-api-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-bash-completion-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-doc-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-master-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-proxy-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-ssh-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-syndic-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 salt-zsh-completion-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.0 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.1 python3-salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.1 salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.1 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.1 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.2 python3-salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.2 salt-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.2 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Proxy 3.2 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-api-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-bash-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-doc-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-master-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-proxy-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-ssh-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-syndic-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 salt-zsh-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.0 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 python3-salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-api-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-bash-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-cloud-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-doc-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-master-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-proxy-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-ssh-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-syndic-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 salt-zsh-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.1 python2-salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 python3-salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-api-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-bash-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-cloud-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-doc-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-master-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-minion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-proxy-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-ssh-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-syndic-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 salt-zsh-completion-2018.3.0-46.44.1 as a component of SUSE Manager Server 3.2 Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server. CVE-2018-15750 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2018.3.0-46.44.1 SUSE Manager Client Tools 12:python2-salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:python3-salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-doc-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-api-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-doc-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-master-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-proxy-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-ssh-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-syndic-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:python3-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:python3-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.0:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Server 3.1:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:python3-salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-cloud-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Server 3.2:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:python3-salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-cloud-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-zsh-completion-2018.3.0-46.44.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183862-1/ https://www.suse.com/security/cve/CVE-2018-15750.html CVE-2018-15750 https://bugzilla.suse.com/1113698 SUSE Bug 1113698 SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi). CVE-2018-15751 SUSE Linux Enterprise Module for Advanced Systems Management 12:python2-salt-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2018.3.0-46.44.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:python2-salt-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2018.3.0-46.44.1 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2018.3.0-46.44.1 SUSE Manager Client Tools 12:python2-salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:python3-salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-doc-2018.3.0-46.44.1 SUSE Manager Client Tools 12:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-api-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-doc-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-master-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-proxy-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-ssh-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-syndic-2018.3.0-46.44.1 SUSE Manager Proxy 3.0:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:python3-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.1:salt-minion-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:python2-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:python3-salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:salt-2018.3.0-46.44.1 SUSE Manager Proxy 3.2:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.0:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.0:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Server 3.1:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:python3-salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-cloud-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.1:salt-zsh-completion-2018.3.0-46.44.1 SUSE Manager Server 3.2:python2-salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:python3-salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-api-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-bash-completion-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-cloud-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-doc-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-master-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-minion-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-proxy-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-ssh-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-syndic-2018.3.0-46.44.1 SUSE Manager Server 3.2:salt-zsh-completion-2018.3.0-46.44.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183862-1/ https://www.suse.com/security/cve/CVE-2018-15751.html CVE-2018-15751 https://bugzilla.suse.com/1113698 SUSE Bug 1113698 https://bugzilla.suse.com/1113699 SUSE Bug 1113699