SUSE-SU-2021:3556-1
- Source
- https://www.suse.com/support/update/announcement/2021/suse-su-20213556-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3556-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2021:3556-1
- Upstream
- Related
- Published
- 2021-10-27T13:29:15Z
- Modified
- 2026-03-11T07:19:03Z
- Summary
- Security update for salt
- Details
-
This update for salt fixes the following issues:
- Support querying for JSON data in external sql pillar.
- Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265, CVE-2021-21996)
- References
Affected packages
SUSE:Linux Enterprise Micro 5.0
salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Micro%205.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3002.2-49.2
SUSE:Linux Enterprise Module for Basesystem 15 SP2
salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3002.2-49.2
SUSE:Linux Enterprise Module for Server Applications 15 SP2
salt
Package
- Name
- salt
- Purl
- pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3002.2-49.2
Ecosystem specific
{
"binaries": [
{
"salt-api": "3002.2-49.2",
"salt-cloud": "3002.2-49.2",
"salt-fish-completion": "3002.2-49.2",
"salt-master": "3002.2-49.2",
"salt-proxy": "3002.2-49.2",
"salt-ssh": "3002.2-49.2",
"salt-standalone-formulas-configuration": "3002.2-49.2",
"salt-syndic": "3002.2-49.2"
}
]
}