CVE-2021-21996

Upstream information

CVE-2021-21996 at MITRE

Description

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

---

SUSE information

Overall state of this security issue: Revisit

This issue is currently rated as having moderate severity.

CVSS v3 Scores

	SUSE
Base Score	4.2
Vector	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Access Vector	Local
Access Complexity	Low
Privileges Required	High
User Interaction	None
Scope	Unchanged
Confidentiality Impact	Low
Integrity Impact	Low
Availability Impact	Low
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1190265 [IN_PROGRESS]

SUSE Security Advisories:

• SUSE-SU-2021:14831-1, published Wed Oct 27 19:39:57 UTC 2021
• SUSE-SU-2021:14832-1, published Wed Oct 27 19:24:08 UTC 2021
• SUSE-SU-2021:14833-1, published Wed Oct 27 19:48:21 UTC 2021
• SUSE-SU-2021:3547-1, published Wed Oct 27 19:32:43 UTC 2021
• SUSE-SU-2021:3549-1, published Wed Oct 27 19:20:46 UTC 2021
• SUSE-SU-2021:3550-1, published Wed Oct 27 19:41:42 UTC 2021
• SUSE-SU-2021:3553-1, published Wed Oct 27 19:27:11 UTC 2021
• SUSE-SU-2021:3555-1, published Wed Oct 27 19:18:07 UTC 2021
• SUSE-SU-2021:3556-1, published Wed Oct 27 19:55:44 UTC 2021
• SUSE-SU-2021:3557-1, published Wed Oct 27 19:54:24 UTC 2021
• SUSE-SU-2021:3561-1, published Wed Oct 27 19:34:26 UTC 2021
• SUSE-SU-2021:3621-1, published Fri Nov 5 20:17:10 UTC 2021
• SUSE-SU-2021:3901-1, published Fri Dec 3 14:19:27 UTC 2021
• SUSE-SU-2021:3902-1, published Fri Dec 3 14:55:46 UTC 2021
• SUSE-SU-2021:3903-1, published Fri Dec 3 14:42:56 UTC 2021
• SUSE-SU-2021:3904-1, published Fri Dec 3 15:05:57 UTC 2021
• SUSE-SU-2021:3906-1, published Fri Dec 3 14:31:58 UTC 2021
• SUSE-SU-2021:3908-1, published Fri Dec 3 15:00:16 UTC 2021
• openSUSE-SU-2021:1443-1, published Tue Nov 2 18:50:04 2021
• openSUSE-SU-2021:3557-1, published Thu Oct 28 00:41:07 2021

List of released packages

Product(s)	Fixed package version(s)	References
SUSE CaaS Platform 4.0	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SUSE-CAASP-4.0-2021-3555
SUSE Enterprise Storage 6	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-Storage-6-2021-3555
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-3555
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-3555
SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS	python3-salt >= 3002.2-8.41.17.1 salt >= 3002.2-8.41.17.1 salt-api >= 3002.2-8.41.17.1 salt-bash-completion >= 3002.2-8.41.17.1 salt-cloud >= 3002.2-8.41.17.1 salt-doc >= 3002.2-8.41.17.1 salt-fish-completion >= 3002.2-8.41.17.1 salt-master >= 3002.2-8.41.17.1 salt-minion >= 3002.2-8.41.17.1 salt-proxy >= 3002.2-8.41.17.1 salt-ssh >= 3002.2-8.41.17.1 salt-standalone-formulas-configuration >= 3002.2-8.41.17.1 salt-syndic >= 3002.2-8.41.17.1 salt-transactional-update >= 3002.2-8.41.17.1 salt-zsh-completion >= 3002.2-8.41.17.1	Patchnames: SUSE-SLE-Product-HPC-15-2021-3553
SUSE Linux Enterprise Module for Advanced Systems Management 12	python2-salt >= 3000-46.151.2 salt >= 3000-46.151.2 salt-api >= 3000-46.151.2 salt-bash-completion >= 3000-46.151.2 salt-cloud >= 3000-46.151.2 salt-doc >= 3000-46.151.2 salt-master >= 3000-46.151.2 salt-minion >= 3000-46.151.2 salt-proxy >= 3000-46.151.2 salt-ssh >= 3000-46.151.2 salt-standalone-formulas-configuration >= 3000-46.151.2 salt-syndic >= 3000-46.151.2 salt-zsh-completion >= 3000-46.151.2	Patchnames: SUSE-SLE-Module-Adv-Systems-Management-12-2021-3550
SUSE Linux Enterprise Module for Basesystem 15 SP2	python3-salt >= 3002.2-49.2 salt >= 3002.2-49.2 salt-bash-completion >= 3002.2-49.2 salt-doc >= 3002.2-49.2 salt-minion >= 3002.2-49.2 salt-zsh-completion >= 3002.2-49.2	Patchnames: SUSE-SLE-Module-Basesystem-15-SP2-2021-3556
SUSE Linux Enterprise Module for Basesystem 15 SP3	python3-salt >= 3002.2-50.1.15.1 salt >= 3002.2-50.1.15.1 salt-bash-completion >= 3002.2-50.1.15.1 salt-doc >= 3002.2-50.1.15.1 salt-minion >= 3002.2-50.1.15.1 salt-zsh-completion >= 3002.2-50.1.15.1	Patchnames: SUSE-SLE-Module-Basesystem-15-SP3-2021-3557
SUSE Linux Enterprise Module for SUSE Manager Server 4.1	grafana-formula >= 0.4.2-3.12.2 prometheus-formula >= 0.3.4-3.12.2 py26-compat-salt >= 2016.11.10-17.2 py26-compat-tornado >= 4.2.1-3.3.2 py27-compat-salt >= 3000.3-6.15.2 python3-spacewalk-certs-tools >= 4.1.19-3.22.2 spacecmd >= 4.1.15-4.30.2 spacewalk-backend >= 4.1.29-4.44.2 spacewalk-backend-app >= 4.1.29-4.44.2 spacewalk-backend-applet >= 4.1.29-4.44.2 spacewalk-backend-config-files >= 4.1.29-4.44.2 spacewalk-backend-config-files-common >= 4.1.29-4.44.2 spacewalk-backend-config-files-tool >= 4.1.29-4.44.2 spacewalk-backend-iss >= 4.1.29-4.44.2 spacewalk-backend-iss-export >= 4.1.29-4.44.2 spacewalk-backend-package-push-server >= 4.1.29-4.44.2 spacewalk-backend-server >= 4.1.29-4.44.2 spacewalk-backend-sql >= 4.1.29-4.44.2 spacewalk-backend-sql-postgresql >= 4.1.29-4.44.2 spacewalk-backend-tools >= 4.1.29-4.44.2 spacewalk-backend-xml-export-libs >= 4.1.29-4.44.2 spacewalk-backend-xmlrpc >= 4.1.29-4.44.2 spacewalk-base >= 4.1.30-3.36.1 spacewalk-base-minimal >= 4.1.30-3.36.1 spacewalk-base-minimal-config >= 4.1.30-3.36.1 spacewalk-certs-tools >= 4.1.19-3.22.2 spacewalk-html >= 4.1.30-3.36.1 spacewalk-java >= 4.1.41-3.58.2 spacewalk-java-config >= 4.1.41-3.58.2 spacewalk-java-lib >= 4.1.41-3.58.2 spacewalk-java-postgresql >= 4.1.41-3.58.2 spacewalk-reports >= 4.1.4-3.6.2 spacewalk-taskomatic >= 4.1.41-3.58.2 subscription-matcher >= 0.27-3.12.2 susemanager >= 4.1.31-3.39.2 susemanager-doc-indexes >= 4.1-11.46.2 susemanager-docs_en >= 4.1-11.46.2 susemanager-docs_en-pdf >= 4.1-11.46.2 susemanager-sls >= 4.1.31-3.51.2 susemanager-tools >= 4.1.31-3.39.2 susemanager-web-libs >= 4.1.30-3.36.1 uyuni-config-modules >= 4.1.31-3.51.2	Patchnames: SUSE-SLE-Module-SUSE-Manager-Server-4.1-2021-3621
SUSE Linux Enterprise Module for SUSE Manager Server 4.2	cobbler >= 3.1.2-5.11.1 hub-xmlrpc-api >= 0.7-3.3.3 inter-server-sync >= 0.0.5-8.6.3 patterns-suma_retail >= 4.2-4.3.1 patterns-suma_server >= 4.2-4.3.1 py26-compat-salt >= 2016.11.10-11.28.9.1 py26-compat-tornado >= 4.2.1-3.3.1 py27-compat-salt >= 3000.3-7.7.11.1 python3-spacewalk-certs-tools >= 4.2.13-3.9.2 python3-spacewalk-client-tools >= 4.2.14-4.9.3 spacecmd >= 4.2.13-4.9.1 spacewalk-admin >= 4.2.9-3.6.2 spacewalk-backend >= 4.2.17-4.9.3 spacewalk-backend-app >= 4.2.17-4.9.3 spacewalk-backend-applet >= 4.2.17-4.9.3 spacewalk-backend-config-files >= 4.2.17-4.9.3 spacewalk-backend-config-files-common >= 4.2.17-4.9.3 spacewalk-backend-config-files-tool >= 4.2.17-4.9.3 spacewalk-backend-iss >= 4.2.17-4.9.3 spacewalk-backend-iss-export >= 4.2.17-4.9.3 spacewalk-backend-package-push-server >= 4.2.17-4.9.3 spacewalk-backend-server >= 4.2.17-4.9.3 spacewalk-backend-sql >= 4.2.17-4.9.3 spacewalk-backend-sql-postgresql >= 4.2.17-4.9.3 spacewalk-backend-tools >= 4.2.17-4.9.3 spacewalk-backend-xml-export-libs >= 4.2.17-4.9.3 spacewalk-backend-xmlrpc >= 4.2.17-4.9.3 spacewalk-base >= 4.2.23-3.9.3 spacewalk-base-minimal >= 4.2.23-3.9.3 spacewalk-base-minimal-config >= 4.2.23-3.9.3 spacewalk-certs-tools >= 4.2.13-3.9.2 spacewalk-client-tools >= 4.2.14-4.9.3 spacewalk-html >= 4.2.23-3.9.3 spacewalk-java >= 4.2.30-3.14.4 spacewalk-java-config >= 4.2.30-3.14.4 spacewalk-java-lib >= 4.2.30-3.14.4 spacewalk-java-postgresql >= 4.2.30-3.14.4 spacewalk-taskomatic >= 4.2.30-3.14.4 spacewalk-utils >= 4.2.14-3.9.3 spacewalk-utils-extras >= 4.2.14-3.9.3 subscription-matcher >= 0.27-6.3.1 supportutils-plugin-susemanager >= 4.2.3-3.3.2 susemanager >= 4.2.25-3.13.1 susemanager-doc-indexes >= 4.2-12.11.3 susemanager-docs_en >= 4.2-12.11.1 susemanager-docs_en-pdf >= 4.2-12.11.1 susemanager-schema >= 4.2.18-3.9.3 susemanager-sls >= 4.2.18-3.11.1 susemanager-sync-data >= 4.2.9-3.9.1 susemanager-tools >= 4.2.25-3.13.1 susemanager-web-libs >= 4.2.23-3.9.3 uyuni-config-modules >= 4.2.18-3.11.1 virtualization-formulas >= 0.6.1-8.3.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Server-4.2-2021-3561
SUSE Linux Enterprise Module for Server Applications 15 SP2	salt-api >= 3002.2-49.2 salt-cloud >= 3002.2-49.2 salt-fish-completion >= 3002.2-49.2 salt-master >= 3002.2-49.2 salt-proxy >= 3002.2-49.2 salt-ssh >= 3002.2-49.2 salt-standalone-formulas-configuration >= 3002.2-49.2 salt-syndic >= 3002.2-49.2	Patchnames: SUSE-SLE-Module-Server-Applications-15-SP2-2021-3556
SUSE Linux Enterprise Module for Server Applications 15 SP3	salt-api >= 3002.2-50.1.15.1 salt-cloud >= 3002.2-50.1.15.1 salt-fish-completion >= 3002.2-50.1.15.1 salt-master >= 3002.2-50.1.15.1 salt-proxy >= 3002.2-50.1.15.1 salt-ssh >= 3002.2-50.1.15.1 salt-standalone-formulas-configuration >= 3002.2-50.1.15.1 salt-syndic >= 3002.2-50.1.15.1	Patchnames: SUSE-SLE-Module-Server-Applications-15-SP3-2021-3557
SUSE Linux Enterprise Module for Transactional Server 15 SP2	salt-transactional-update >= 3002.2-49.2	Patchnames: SUSE-SLE-Module-Transactional-Server-15-SP2-2021-3556
SUSE Linux Enterprise Module for Transactional Server 15 SP3	salt-transactional-update >= 3002.2-50.1.15.1	Patchnames: SUSE-SLE-Module-Transactional-Server-15-SP3-2021-3557
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS	python2-spacewalk-check >= 4.2.14-27.59.1 python2-spacewalk-client-setup >= 4.2.14-27.59.1 python2-spacewalk-client-tools >= 4.2.14-27.59.1 salt >= 2016.11.10-43.84.1 salt-doc >= 2016.11.10-43.84.1 salt-minion >= 2016.11.10-43.84.1 spacecmd >= 4.2.13-18.93.1 spacewalk-check >= 4.2.14-27.59.1 spacewalk-client-setup >= 4.2.14-27.59.1 spacewalk-client-tools >= 4.2.14-27.59.1	Patchnames: slesctsp3-client-tools-202110-14833
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS	python2-spacewalk-check >= 4.2.14-27.59.1 python2-spacewalk-client-setup >= 4.2.14-27.59.1 python2-spacewalk-client-tools >= 4.2.14-27.59.1 salt >= 2016.11.10-43.84.1 salt-doc >= 2016.11.10-43.84.1 salt-minion >= 2016.11.10-43.84.1 spacecmd >= 4.2.13-18.93.1 spacewalk-check >= 4.2.14-27.59.1 spacewalk-client-setup >= 4.2.14-27.59.1 spacewalk-client-tools >= 4.2.14-27.59.1	Patchnames: slesctsp4-client-tools-202110-14833
SUSE Linux Enterprise Server 15 SP1-BCL	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SLE-Product-SLES-15-SP1-BCL-2021-3555
SUSE Linux Enterprise Server 15 SP1-LTSS	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-3555
SUSE Linux Enterprise Server 15-LTSS	python3-salt >= 3002.2-8.41.17.1 salt >= 3002.2-8.41.17.1 salt-api >= 3002.2-8.41.17.1 salt-bash-completion >= 3002.2-8.41.17.1 salt-cloud >= 3002.2-8.41.17.1 salt-doc >= 3002.2-8.41.17.1 salt-fish-completion >= 3002.2-8.41.17.1 salt-master >= 3002.2-8.41.17.1 salt-minion >= 3002.2-8.41.17.1 salt-proxy >= 3002.2-8.41.17.1 salt-ssh >= 3002.2-8.41.17.1 salt-standalone-formulas-configuration >= 3002.2-8.41.17.1 salt-syndic >= 3002.2-8.41.17.1 salt-transactional-update >= 3002.2-8.41.17.1 salt-zsh-completion >= 3002.2-8.41.17.1	Patchnames: SUSE-SLE-Product-SLES-15-2021-3553
SUSE Linux Enterprise Server for SAP Applications 15 SP1	python3-salt >= 3002.2-48.4 salt >= 3002.2-48.4 salt-api >= 3002.2-48.4 salt-bash-completion >= 3002.2-48.4 salt-cloud >= 3002.2-48.4 salt-doc >= 3002.2-48.4 salt-fish-completion >= 3002.2-48.4 salt-master >= 3002.2-48.4 salt-minion >= 3002.2-48.4 salt-proxy >= 3002.2-48.4 salt-ssh >= 3002.2-48.4 salt-standalone-formulas-configuration >= 3002.2-48.4 salt-syndic >= 3002.2-48.4 salt-transactional-update >= 3002.2-48.4 salt-zsh-completion >= 3002.2-48.4	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP1-2021-3555
SUSE Linux Enterprise Server for SAP Applications 15	python3-salt >= 3002.2-8.41.17.1 salt >= 3002.2-8.41.17.1 salt-api >= 3002.2-8.41.17.1 salt-bash-completion >= 3002.2-8.41.17.1 salt-cloud >= 3002.2-8.41.17.1 salt-doc >= 3002.2-8.41.17.1 salt-fish-completion >= 3002.2-8.41.17.1 salt-master >= 3002.2-8.41.17.1 salt-minion >= 3002.2-8.41.17.1 salt-proxy >= 3002.2-8.41.17.1 salt-ssh >= 3002.2-8.41.17.1 salt-standalone-formulas-configuration >= 3002.2-8.41.17.1 salt-syndic >= 3002.2-8.41.17.1 salt-transactional-update >= 3002.2-8.41.17.1 salt-zsh-completion >= 3002.2-8.41.17.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-2021-3553
SUSE Manager Proxy 4.2	release-notes-susemanager-proxy >= 4.2.3-3.15.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2021-3551
SUSE Manager Retail Branch Server 4.2	release-notes-susemanager-proxy >= 4.2.3-3.15.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2021-3551
SUSE Manager Server 4.2	release-notes-susemanager >= 4.2.3-3.19.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.2-2021-3551
SUSE Manager Tools 12	python2-salt >= 3000-46.151.2 python3-salt >= 3000-46.151.2 salt >= 3000-46.151.2 salt-doc >= 3000-46.151.2 salt-minion >= 3000-46.151.2	Patchnames: SUSE-SLE-Manager-Tools-12-2021-3550
SUSE MicroOS 5.0	python3-salt >= 3002.2-49.2 salt >= 3002.2-49.2 salt-minion >= 3002.2-49.2 salt-transactional-update >= 3002.2-49.2	Patchnames: SUSE-SUSE-MicroOS-5.0-2021-3556
SUSE MicroOS 5.1	python3-salt >= 3002.2-50.1.15.1 salt >= 3002.2-50.1.15.1 salt-minion >= 3002.2-50.1.15.1 salt-transactional-update >= 3002.2-50.1.15.1	Patchnames: SUSE-SUSE-MicroOS-5.1-2021-3557
openSUSE Leap 15.2	python3-salt >= 3002.2-lp152.3.45.1 salt >= 3002.2-lp152.3.45.1 salt-api >= 3002.2-lp152.3.45.1 salt-bash-completion >= 3002.2-lp152.3.45.1 salt-cloud >= 3002.2-lp152.3.45.1 salt-doc >= 3002.2-lp152.3.45.1 salt-fish-completion >= 3002.2-lp152.3.45.1 salt-master >= 3002.2-lp152.3.45.1 salt-minion >= 3002.2-lp152.3.45.1 salt-proxy >= 3002.2-lp152.3.45.1 salt-ssh >= 3002.2-lp152.3.45.1 salt-standalone-formulas-configuration >= 3002.2-lp152.3.45.1 salt-syndic >= 3002.2-lp152.3.45.1 salt-transactional-update >= 3002.2-lp152.3.45.1 salt-zsh-completion >= 3002.2-lp152.3.45.1	Patchnames: openSUSE-2021-1443
openSUSE Leap 15.3	python3-salt >= 3002.2-50.1.15.1 salt >= 3002.2-50.1.15.1 salt-api >= 3002.2-50.1.15.1 salt-bash-completion >= 3002.2-50.1.15.1 salt-cloud >= 3002.2-50.1.15.1 salt-doc >= 3002.2-50.1.15.1 salt-fish-completion >= 3002.2-50.1.15.1 salt-master >= 3002.2-50.1.15.1 salt-minion >= 3002.2-50.1.15.1 salt-proxy >= 3002.2-50.1.15.1 salt-ssh >= 3002.2-50.1.15.1 salt-standalone-formulas-configuration >= 3002.2-50.1.15.1 salt-syndic >= 3002.2-50.1.15.1 salt-transactional-update >= 3002.2-50.1.15.1 salt-zsh-completion >= 3002.2-50.1.15.1	Patchnames: openSUSE-SLE-15.3-2021-3557
openSUSE Tumbleweed	python3-salt >= 3002.2-6.1 salt >= 3002.2-6.1 salt-api >= 3002.2-6.1 salt-bash-completion >= 3002.2-6.1 salt-cloud >= 3002.2-6.1 salt-doc >= 3002.2-6.1 salt-fish-completion >= 3002.2-6.1 salt-master >= 3002.2-6.1 salt-minion >= 3002.2-6.1 salt-proxy >= 3002.2-6.1 salt-ssh >= 3002.2-6.1 salt-standalone-formulas-configuration >= 3002.2-6.1 salt-syndic >= 3002.2-6.1 salt-transactional-update >= 3002.2-6.1 salt-zsh-completion >= 3002.2-6.1	Patchnames: openSUSE Tumbleweed GA python3-salt-3002.2-6.1

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-manager-4-1-proxy-byos-v20211207-hvm-ssd-x86_64
• amazon/suse-manager-4-1-server-byos-v20211206-hvm-ssd-x86_64
• amazon/suse-sles-12-sp5-byos-v20211206-hvm-ssd-x86_64
• amazon/suse-sles-sap-12-sp5-byos-v20211207-hvm-ssd-x86_64
• google/sles-12-sp5-byos-v20211204
• google/sles-12-sp5-sap-byos-v20211204
• google/sles-15-sp3-byos-v20211113
• google/sles-15-sp3-hpc-byos-v20220120
• google/sles-15-sp3-sap-byos-v20211113
• google/suse-manager-4-1-proxy-byos-v20211207
• google/suse-manager-4-1-server-byos-v20211207
• google/suse-manager-4-2-proxy-byos-v20211117
• google/suse-manager-4-2-server-byos-v20211113
• microsoft/suse-manager-4-1-proxy-byos-v20211209
• microsoft/suse-manager-4-1-server-byos-v20211209
• microsoft/suse-manager-4-2-proxy-byos-v20211217
• microsoft/suse-manager-4-2-server-byos-v20211217
• microsoft/suse-sles-12-sp5-byos-v20211209
• microsoft/suse-sles-12-sp5-hpc-byos-v20211215
• microsoft/suse-sles-15-sp3-byos-v20211217
• microsoft/suse-sles-sap-12-sp5-byos-v20211209
• microsoft/suse-sles-sap-15-sp3-byos-v20211219

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s)	Source package	State
SUSE CaaS Platform 4.0	salt	Released
SUSE CaaS Platform 4.5	salt	Released
SUSE Enterprise Storage 6	salt	Released
SUSE Enterprise Storage 7	salt	Released
SUSE Linux Enterprise High Performance Computing 15 LTSS	salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP1 ESPOS	salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS	salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP2 ESPOS	salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS	salt	Released
SUSE Linux Enterprise Micro 5.0	salt	Released
SUSE Linux Enterprise Micro 5.1	salt	Released
SUSE Linux Enterprise Module for Advanced Systems Management 12	salt	Released
SUSE Linux Enterprise Module for Basesystem 15 SP2	salt	Released
SUSE Linux Enterprise Module for Basesystem 15 SP3	salt	Released
SUSE Linux Enterprise Module for Basesystem 15 SP4	salt	Already fixed
SUSE Linux Enterprise Module for Server Applications 15 SP2	salt	Released
SUSE Linux Enterprise Module for Server Applications 15 SP3	salt	Released
SUSE Linux Enterprise Module for Server Applications 15 SP4	salt	Already fixed
SUSE Linux Enterprise Module for Transactional Server 15 SP2	salt	Released
SUSE Linux Enterprise Module for Transactional Server 15 SP3	salt	Released
SUSE Linux Enterprise Module for Transactional Server 15 SP4	salt	Already fixed
SUSE Linux Enterprise Real Time 15 SP2	salt	Released
SUSE Linux Enterprise Server 15 ESPOS	salt	Released
SUSE Linux Enterprise Server 15 LTSS	salt	Released
SUSE Linux Enterprise Server 15 SP1 LTSS	salt	Released
SUSE Linux Enterprise Server 15 SP2 LTSS	salt	Released
SUSE Linux Enterprise Server Business Critical Linux 15 SP1	salt	Released
SUSE Linux Enterprise Server Business Critical Linux 15 SP2	salt	Released
SUSE Linux Enterprise Server for SAP Applications 15	salt	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP1	salt	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP2	salt	Released
SUSE Manager Client Tools Beta for Debian 10	salt	In progress
SUSE Manager Client Tools Beta for Debian 9	salt	In progress
SUSE Manager Client Tools Beta for RHEL and ES 8	salt	Released
SUSE Manager Client Tools Beta for SLE 12	salt	Released
SUSE Manager Client Tools Beta for SLE 15	salt	Released
SUSE Manager Client Tools Beta for Ubuntu 1804	salt	In progress
SUSE Manager Client Tools Beta for Ubuntu 2004	salt	In progress
SUSE Manager Client Tools for Debian 10	salt	Released
SUSE Manager Client Tools for Debian 9	salt	Released
SUSE Manager Client Tools for RHEL and ES 8	salt	Released
SUSE Manager Client Tools for SLE 12	salt	Released
SUSE Manager Client Tools for Ubuntu 1804	salt	In progress
SUSE Manager Client Tools for Ubuntu 2004	salt	In progress
SUSE Manager Proxy 4.1	salt	Released
SUSE Manager Retail Branch Server 4.1	salt	Released
SUSE Manager Server 4.1	salt	Released
SUSE Manager Server Module 4.1	py26-compat-salt	In progress
SUSE Manager Server Module 4.1	py27-compat-salt	In progress
SUSE Manager Server Module 4.2	py26-compat-salt	In progress
SUSE Manager Server Module 4.2	py27-compat-salt	In progress
SUSE Manager Server Module 4.3	py26-compat-salt	Analysis
SUSE Manager Server Module 4.3	py27-compat-salt	Analysis