{"id":"SUSE-RU-2017:0171-1","summary":"Recommended update for salt","details":"\nThis update for Salt fixes one security issue and several non-security issues.\n\nThe following security issue has been fixed:\n\n- Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639)\n\nThe following non-security issues have been fixed:\n\n- Update to 2015.8.12\n- Add pre-require to salt for minions.\n- Do not restart salt-minion in salt package.\n- Add try-restart to sys-v init scripts.\n- Add 'Restart=on-failure' for salt-minion systemd service.\n- Re-introduce 'KillMode=process' for salt-minion systemd service.\n- Successfully exit of salt-api child processes when SIGTERM is received.\n- Fix exit codes of sysv init script. (bsc#999852)\n- Include resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade.\n- Fix Salt API crash via salt-ssh on empty roster. (bsc#1004723)\n- Add 'dist-upgrade' support to zypper module. (fate#320559)\n- Fix position of -X option to setfacl. (bsc#1004260)\n- Fix generated shebang in scripts on SLES-ES 7. (bsc#1004047)\n- Fix changing default-timezone. (bsc#1008933)\n","modified":"2026-02-04T04:09:12.740Z","published":"2017-01-17T09:06:09Z","related":["CVE-2016-9639"],"upstream":["CVE-2016-9639"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement//suse-ru-20170171-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1003449"},{"type":"REPORT","url":"https://bugzilla.suse.com/1004047"},{"type":"REPORT","url":"https://bugzilla.suse.com/1004260"},{"type":"REPORT","url":"https://bugzilla.suse.com/1004723"},{"type":"REPORT","url":"https://bugzilla.suse.com/1008933"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012398"},{"type":"REPORT","url":"https://bugzilla.suse.com/986019"},{"type":"REPORT","url":"https://bugzilla.suse.com/999852"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9639"}],"affected":[{"package":{"name":"salt","ecosystem":"SUSE:Enterprise Storage 4","purl":"pkg:rpm/suse/salt&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.12-27.5"}]}],"ecosystem_specific":{"binaries":[{"salt":"2015.8.12-27.5","salt-master":"2015.8.12-27.5","salt-minion":"2015.8.12-27.5"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2017:0171-1.json"}}],"schema_version":"1.7.3"}