PT-2022-37624 · Salt · Salt

Published 2022-04-25 · Updated 2022-04-25 · CVE-2020-22935

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description This issue involves several fixes for the salt software, including clearing network interfaces cache on grains request, handling old qemu-img not supporting the -U parameter, restricting 'state.orchestrate single' to pass a pillar value if it exists, and fixing sparse disk errors on Python 2 for the virt module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-22935

SUSE-RU-2022:1384-1

Affected Products

Salt

References · 10

• https://osv.dev/vulnerability/SUSE-RU-2022:1384-1 · Vendor Advisory
• https://bugzilla.suse.com/1197417 · Note
• https://suse.com/security/cve/CVE-2022-22934 · Note
• https://bugzilla.suse.com/1195221 · Note
• https://bugzilla.suse.com/1196050 · Note
• https://suse.com/security/cve/CVE-2022-22941 · Note
• https://suse.com/security/cve/CVE-2020-22935 · Note
• https://suse.com/security/cve/CVE-2022-22936 · Note
• https://bugzilla.suse.com/1194632 · Note
• https://suse.com/support/update/announcement/-2022-1384/suse-ru-20221384-1 · Note