{"id":"SUSE-SU-2020:0763-1","summary":"Security Beta update for Salt","details":"\nThis update fixes the following issues:\n\nsalt:\n- Requiring python3-distro only for openSUSE/SLE \u003e= 15\n- Use full option name instead of undocumented abbreviation for zypper\n- Python-distro is only needed for \u003e Python 3.7. Removing it for Python 2\n- Fixed a local privilege escalation to root (bsc#1157465) (CVE-2019-18897)\n- Fix unit tests failures in test_batch_async tests\n- Batch Async: Handle exceptions, properly unregister and close instances\n  after running async batching to avoid CPU starvation of the MWorkers (bsc#1162327)\n- RHEL/CentOS 8 uses platform-python instead of python3\n- Enable build for Python 3.8\n- Update to Salt version 2019.2.3 (bsc#1163981) (bsc#1162504)\n- Replacing pycrypto with M2Crypto (bsc#1165425)\n\n","modified":"2026-02-04T03:27:36.348367Z","published":"2020-03-24T14:52:56Z","related":["CVE-2019-18897"],"upstream":["CVE-2019-18897"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200763-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1157465"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162327"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162504"},{"type":"REPORT","url":"https://bugzilla.suse.com/1163981"},{"type":"REPORT","url":"https://bugzilla.suse.com/1165425"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-18897"}],"schema_version":"1.7.3"}