Security update for salt

This update for salt fixes the following issues:

- [Regression] Permission problem: salt-ssh minion boostrap doesn't work anymore. (bsc#1027722)
- wrong use of os_family string for Suse in the locale module and others (bsc#1038855)
- Cannot bootstrap a host using "Manage system completely via SSH (will not install an agent)" (bsc#1002529)
- add user to or replace members of group not working with SLES11 SPx (bsc#978150)
- SLES-12-GA client fail to start salt minion (SUSE MANAGER 3.0) (bsc#991048)
- salt pkg.latest raises exception if package is not availible (bsc#1012999)
- pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty (bsc#989193)
- SLES-12-SP1 salt-minion clients has no Base Channel added by default (bsc#986019)
- "The system requires a reboot" does not disappear from web-UI despite the reboot (bsc#1017078)
- Remove option -f from startproc (bsc#975733)
- [PYTHON2] package salt-minion requires /usr/bin/python (bsc#1081592)
- Upgrading packages on RHEL6/7 client fails (bsc#1068566)
- /var/log/salt has insecure permissions (bsc#1071322)
- [Minion-bootstrapping] Invalid char cause server (salt-master ERROR) (bsc#1011304)
- CVE-2016-9639: Possible information leak due to revoked keys still being used (bsc#1012398)
- Bootstrapping SLES12 minion invalid (bsc#1053376)
- Minions not correctly onboarded if Proxy has multiple FQDNs (bsc#1063419)
- salt --summary '*' reporting "# of minions that did not return" wrongly (bsc#972311)
- RH-L3 SALT - Stacktrace if nscd package is not present when using nscd state (bsc#1027044)
- Inspector broken: no module "query" or "inspector" while querying or inspecting (bsc#989798)
- [ Regression ]Centos7 Minion remote command execution from gui or cli , minion not responding (bsc#1027240)
- SALT, minion_id generation doesn't match the newhostname (bsc#967803)
- Salt API server shuts down when SSH call with no matches is issued (bsc#1004723)
- /var/log/salt/minion fails logrotate (bsc#1030009)
- Salt proxy test.ping crashes (bsc#975303)
- salt master flood log with useless messages (bsc#985661)
- After bootstrap salt client has deprecation warnings (bsc#1041993)
- Head: salt 2017.7.2 starts salt-master as user root (bsc#1064520)
- CVE-2017-12791: Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master (bsc#1053955)
- salt-2017.7.2 - broken %post script for salt-master (bsc#1079048)
- Tearing down deployment with SaltStack Kubernetes module always shows error (bsc#1059291)
- lvm.vg_present does not recognize PV with certain LVM filter settings. (bsc#988506)
- High state fails: No service execution module loaded: check support for service (bsc#1065792)
- When multiple versions of a package are installed on a minion, patch status may vary (bsc#972490)
- Salt cp.push does not work on SUMA 3.2 Builds because of python3.4 (bsc#1075950)
- timezone modue does not update /etc/sysconfig/clock (bsc#1008933)
- Add patches to salt to support SUSE Manager scalability features (bsc#1052264)
- salt-minion failed to start on minimal RHEL6 because of DBus exception during load of snapper module (bsc#993039)
- Permission denied: '/var/run/salt-master.pid' (bsc#1050003)
- Jobs scheduled to run at a future time stay pending for Salt minions (bsc#1036125)
- Backport kubernetes-modules to salt (bsc#1051948)
- After highstate: The minion function caused an exception (bsc#1068446)
- VUL-0: CVE-2017-14695: salt: directory traversal vulnerability in minion id validation (bsc#1062462)
- unable to update salt-minion on RHEL (bsc#1022841)
- Nodes run out of memory due to salt-minion process (bsc#983512)
- [Proxy] "Broken pipe" during bootstrap of salt minion (bsc#1039370)
- incorrect return code from /etc/rc.d/salt-minion (bsc#999852)
- CVE-2017-5200: Salt-ssh via api let's run arbitrary commands as user salt (bsc#1011800)
- beacons.conf on salt-minion not processed (bsc#1060230)
- SLES11 SP3 salt-minion Client Cannot Select Base Channel (bsc#975093)
- salt-ssh sys.doc gives authentication failure without arguments (bsc#1019386)
- minion bootstrapping: error when bootstrap SLE11 clients (bsc#990439)
- Certificate Deployment Fails for SLES11 SP3 Clients (bsc#975757)
- state.module run() does not translate varargs (bsc#1025896)

Fixed bugs
bnc#1027722
[Regression] Permission problem: salt-ssh minion boostrap doesn't work anymore.
bnc#1038855
wrong use of os_family string for Suse in the locale module and others
bnc#1002529
Cannot bootstrap a host using "Manage system completely via SSH (will not install an agent)"
bnc#978150
add user to or replace members of group not working with SLES11 SPx
bnc#991048
SLES-12-GA client fail to start salt minion (SUSE MANAGER 3.0)
bnc#1012999
salt pkg.latest raises exception if package is not availible
bnc#989193
pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty
bnc#986019
SLES-12-SP1 salt-minion clients has no Base Channel added by default
bnc#1017078
"The system requires a reboot" does not disappear from web-UI despite the reboot
bnc#975733
Remove option -f from startproc
bnc#1081592
[PYTHON2] package salt-minion requires /usr/bin/python
bnc#1068566
Upgrading packages on RHEL6/7 client fails
bnc#1071322
/var/log/salt has insecure permissions
bnc#1011304
[Minion-bootstrapping] Invalid char cause server (salt-master ERROR)
bnc#1012398
VUL-1: CVE-2016-9639: salt: Possible information leak due to revoked keys still being used
bnc#1053376
Bootstrapping SLES12 minion invalid
bnc#1063419
Minions not correctly onboarded if Proxy has multiple FQDNs
bnc#972311
salt --summary '*' <function> reporting "# of minions that did not return" wrongly
bnc#1027044
RH-L3 SALT - Stacktrace if nscd package is not present when using nscd state
bnc#989798
Inspector broken: no module "query" or "inspector" while querying or inspecting
bnc#1027240
[ Regression ]Centos7 Minion remote command execution from gui or cli , minion not responding
bnc#967803
SALT, minion_id generation doesn't match the newhostname
bnc#1004723
Salt API server shuts down when SSH call with no matches is issued
bnc#1030009
/var/log/salt/minion fails logrotate
bnc#975303
Salt proxy test.ping crashes
bnc#985661
salt master flood log with useless messages
bnc#1041993
After bootstrap salt client has deprecation warnings
bnc#1064520
Head: salt 2017.7.2 starts salt-master as user root
bnc#1053955
VUL-0: CVE-2017-12791: salt: Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master
bnc#1079048
salt-2017.7.2 - broken %post script for salt-master
bnc#1059291
Tearing down deployment with SaltStack Kubernetes module always shows error
bnc#988506
lvm.vg_present does not recognize PV with certain LVM filter settings.
bnc#1065792
High state fails: No service execution module loaded: check support for service
bnc#972490
When multiple versions of a package are installed on a minion, patch status may vary
bnc#1075950
Salt cp.push does not work on SUMA 3.2 Builds because of python3.4
bnc#1008933
timezone modue does not update /etc/sysconfig/clock
bnc#1052264
Add patches to salt to support SUSE Manager scalability features
bnc#993039
salt-minion failed to start on minimal RHEL6 because of DBus exception during load of snapper module
bnc#1050003
Permission denied: '/var/run/salt-master.pid'
bnc#1036125
Jobs scheduled to run at a future time stay pending for Salt minions
bnc#1051948
Backport kubernetes-modules to salt
bnc#1068446
After highstate: The minion function caused an exception
bnc#1062462
VUL-0: CVE-2017-14695: salt: directory traversal vulnerability in minion id validation
bnc#1022841
unable to update salt-minion on RHEL
bnc#983512
Nodes run out of memory due to salt-minion process
bnc#1039370
[Proxy] "Broken pipe" during bootstrap of salt minion
bnc#999852
incorrect return code from /etc/rc.d/salt-minion
bnc#1011800
VUL-1: CVE-2017-5200: salt: Salt-ssh via api let's run arbitrary commands as user salt
bnc#1060230
beacons.conf on salt-minion not processed
bnc#975093
SLES11 SP3 salt-minion Client Cannot Select Base Channel
bnc#1019386
salt-ssh sys.doc gives authentication failure without arguments
bnc#990439
minion bootstrapping: error when bootstrap SLE11 clients
bnc#975757
Certificate Deployment Fails for SLES11 SP3 Clients
bnc#1025896
state.module run() does not translate varargs
Selected Binaries
openSUSE Build Service is sponsored by