SHA256
1
0
forked from pool/salt

Accepting request 1108239 from home:PSuarezHernandez:branches:systemsmanagement:saltstack

- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch

- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897, bsc#1214796)

OBS-URL: https://build.opensuse.org/request/show/1108239
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:saltstack/salt?expand=0&rev=214
This commit is contained in:
2023-08-31 10:03:35 +00:00
committed by Git OBS Bridge
parent 4093dfc994
commit 1d85db55a1
4 changed files with 846 additions and 2 deletions

View File

@@ -1,8 +1,17 @@
-------------------------------------------------------------------
Thu Aug 31 09:51:20 UTC 2023 - Pablo Suárez Hernández <pablo.suarezhernandez@suse.com>
- Fix gitfs cachedir basename to avoid hash collisions
(bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
* fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
-------------------------------------------------------------------
Tue Aug 22 12:03:21 UTC 2023 - Pablo Suárez Hernández <pablo.suarezhernandez@suse.com>
- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897, bsc#1214796)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)