Overview

Request 966988 accepted

- Fixes for Python 3.10
- Fix salt-ssh opts poisoning (bsc#1197637)
- Fix multiple security issues (bsc#1197417)
- * Sign authentication replies to prevent MiTM (CVE-2022-22935)
- * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
- * Prevent job and fileserver replays (CVE-2022-22936)
- * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
* fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
* fixes-for-python-3.10-502.patch
* fix-multiple-security-issues-bsc-1197417.patch

Request History
Victor Zhestkov's avatar

vzhestkov created request

- Fixes for Python 3.10
- Fix salt-ssh opts poisoning (bsc#1197637)
- Fix multiple security issues (bsc#1197417)
- * Sign authentication replies to prevent MiTM (CVE-2022-22935)
- * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
- * Prevent job and fileserver replays (CVE-2022-22936)
- * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
* fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
* fixes-for-python-3.10-502.patch
* fix-multiple-security-issues-bsc-1197417.patch


Pablo Suárez Hernández's avatar

PSuarezHernandez accepted request

openSUSE Build Service is sponsored by