{"schemaVersion":3,"id":"SUSE-SU-2017:1582-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for Salt\n\n\nThis update for salt provides version 2016.11.4 and brings various fixes and improvements:\n\n- Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade.\n- Fix format error. (bsc#1043111)\n- Fix ownership for whole master cache directory. (bsc#1035914)\n- Disable 3rd party runtime packages to be explicitly recommended. (bsc#1040886)\n- Fix insecure permissions in salt-ssh temporary files. (bsc#1035912, CVE-2017-8109)\n- Disable custom rosters for Salt SSH via Salt API. (bsc#1011800, CVE-2017-5200)\n- Orchestrate and batches don't return false failed information anymore.\n- Speed-up cherrypy by removing sleep call.\n- Fix os_family grains on SUSE. (bsc#1038855)\n- Fix setting the language on SUSE systems. (bsc#1038855)\n- Use SUSE specific salt-api.service. (bsc#1039370)\n- Fix using hostname for minion ID as '127'.\n- Fix core grains constants for timezone. (bsc#1032931)\n- Minor fixes on new pkg.list_downloaded.\n- Listing all type of advisory patches for Yum module.\n- Prevents zero length error on Python 2.6.\n- Fixes zypper test error after backporting.\n- Raet protocol is no longer supported. (bsc#1020831)\n- Fix moving SSH data to the new home. (bsc#1027722)\n- Fix logrotating /var/log/salt/minion. (bsc#1030009)\n- Fix result of master_tops extension is mutually overwritten. (bsc#1030073)\n- Allows to set 'timeout' and 'gather_job_timeout' via kwargs.\n- Allows to set custom timeouts for 'manage.up' and 'manage.status'.\n- Use salt's ordereddict for comparison.\n- Fix scripts for salt-proxy.\n- Add openscap module.\n- File.get_managed regression fix.\n- Fix translate variable arguments if they contain hidden keywords. (bsc#1025896)\n- Added unit test for dockerng.sls_build dryrun.\n- Added dryrun to dockerng.sls_build.\n- Update dockerng minimal version requirements.\n- Fix format error in error parsing.\n- Keep fix for migrating salt home directory. (bsc#1022562)\n- Fix  salt pkg.latest raises exception if package is not available. (bsc#1012999)\n- Timezone should always be in UTC. (bsc#1017078)\n- Fix timezone handling for rpm installtime. (bsc#1017078)\n- Increasing timeouts for running integrations tests.\n- Add buildargs option to dockerng.build module.\n- Fix error when missing ssh-option parameter.\n- Re-add yum notify plugin.\n- All kwargs to dockerng.create to provide all features to sls_build as well.\n- Datetime should be returned always in UTC.\n- Fix possible crash  while deserialising data on infinite recursion in scheduled state. (bsc#1036125)\n- Documentation refresh to 2016.11.4\n- For a detailed description, please refer to:\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.1.html","dates":{"published":"2017-06-16T11:49:27.000Z","modified":"2026-02-04T03:07:42.551Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"salt&distro=SUSE Enterprise Storage 3","name":"salt","label":"salt&distro=SUSE Enterprise Storage 3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Enterprise Storage 3","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Enterprise Storage 4","name":"salt","label":"salt&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12","name":"salt","label":"salt&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Linux Enterprise Point of Sale 12 SP2","name":"salt","label":"salt&distro=SUSE Linux Enterprise Point of Sale 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Linux Enterprise Point of Sale 12 SP2","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Manager Client Tools 12","name":"salt","label":"salt&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Manager Proxy 3.0","name":"salt","label":"salt&distro=SUSE Manager Proxy 3.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Manager Proxy 3.0","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null},{"vendor":"suse","product":"salt&distro=SUSE Manager Server 3.0","name":"salt","label":"salt&distro=SUSE Manager Server 3.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt&distro=SUSE Manager Server 3.0","purlType":"rpm","versions":[{"text":"< 2016.11.4-45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.4-45.2","eol":null,"hubHref":null}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171582-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171582-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1011800","label":"bugzilla.suse.com/1011800","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012999","label":"bugzilla.suse.com/1012999","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1017078","label":"bugzilla.suse.com/1017078","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1020831","label":"bugzilla.suse.com/1020831","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1022562","label":"bugzilla.suse.com/1022562","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1025896","label":"bugzilla.suse.com/1025896","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1027240","label":"bugzilla.suse.com/1027240","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1027722","label":"bugzilla.suse.com/1027722","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1030009","label":"bugzilla.suse.com/1030009","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1030073","label":"bugzilla.suse.com/1030073","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1032931","label":"bugzilla.suse.com/1032931","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1035912","label":"bugzilla.suse.com/1035912","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1035914","label":"bugzilla.suse.com/1035914","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1036125","label":"bugzilla.suse.com/1036125","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1038855","label":"bugzilla.suse.com/1038855","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1039370","label":"bugzilla.suse.com/1039370","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1040584","label":"bugzilla.suse.com/1040584","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1040886","label":"bugzilla.suse.com/1040886","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1043111","label":"bugzilla.suse.com/1043111","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5200","label":"www.suse.com/security/cve/CVE-2017-5200","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8109","label":"www.suse.com/security/cve/CVE-2017-8109","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-5200","CVE-2017-8109"],"downstream":[],"duplicates":[],"related":["CVE-2017-5200","CVE-2017-8109"]},"timeline":[{"kind":"published","date":"2017-06-16T11:49:27.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:07:42.551Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:44:22.619Z","stale":false,"partial":false}}