gpp_maybe
Security update for salt
SUSE-SLE-Module-Server-Applications-15-SP6-2025-2501
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565) - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566) - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567) - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568) - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570) - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571) - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572) - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575) - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268) - Other bugs fixed: - Added subsystem filter to udev.exportdb (bsc#1236621) - Fixed Ubuntu 24.04 test failures - Fixed refresh of osrelease and related grains on Python 3.10+ - Fixed issue requiring proper Python flavor for dependencies
-
Release DateJul 23 2025
-
ReferencesBugzilla: 1244565, 1236621, 1244561, 1244575, 1243268, 1244567, 1244571, 1244572, 1244568, 1244564, 1244574, 1244570, 1244566
CVEs: CVE-2024-38822, CVE-2024-38825, CVE-2025-22239, CVE-2025-22241, CVE-2025-47287, CVE-2025-22240, CVE-2025-22236, CVE-2025-22237, CVE-2025-22242, CVE-2024-38824, CVE-2024-38823, CVE-2025-22238 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Server Applications Module 15.6 ppc64le
-
Packagessalt
A parallel remote execution systemsalt-api3006.0-150500.4.55.1 lock src
The api for Salt a parallel remote execution systemsalt-cloud3006.0-150500.4.55.1 lock rpm
Generic cloud provisioning tool for Saltstacksalt-fish-completion3006.0-150500.4.55.1 lock rpm
Fish Completion for saltsalt-master3006.0-150500.4.55.1 lock rpm
The management component of Saltstack with zmq protocol supportedsalt-proxy3006.0-150500.4.55.1 lock rpm
Component for salt that enables controlling arbitrary devicessalt-ssh3006.0-150500.4.55.1 lock rpm
Management component for Saltstack with ssh protocolsalt-standalone-formulas-configuration3006.0-150500.4.55.1 lock rpm
Standalone Salt configuration to make the packaged formulas available for the Salt mastersalt-syndic3006.0-150500.4.55.1 lock rpm
The syndic component for saltstack3006.0-150500.4.55.1 lock rpm
Server Applications Module 15.6 s390x
-
Packagessalt
A parallel remote execution systemsalt-api3006.0-150500.4.55.1 lock src
The api for Salt a parallel remote execution systemsalt-cloud3006.0-150500.4.55.1 lock rpm
Generic cloud provisioning tool for Saltstacksalt-fish-completion3006.0-150500.4.55.1 lock rpm
Fish Completion for saltsalt-master3006.0-150500.4.55.1 lock rpm
The management component of Saltstack with zmq protocol supportedsalt-proxy3006.0-150500.4.55.1 lock rpm
Component for salt that enables controlling arbitrary devicessalt-ssh3006.0-150500.4.55.1 lock rpm
Management component for Saltstack with ssh protocolsalt-standalone-formulas-configuration3006.0-150500.4.55.1 lock rpm
Standalone Salt configuration to make the packaged formulas available for the Salt mastersalt-syndic3006.0-150500.4.55.1 lock rpm
The syndic component for saltstack3006.0-150500.4.55.1 lock rpm
Server Applications Module 15.6 aarch64
-
Packagessalt
A parallel remote execution systemsalt-api3006.0-150500.4.55.1 lock src
The api for Salt a parallel remote execution systemsalt-cloud3006.0-150500.4.55.1 lock rpm
Generic cloud provisioning tool for Saltstacksalt-fish-completion3006.0-150500.4.55.1 lock rpm
Fish Completion for saltsalt-master3006.0-150500.4.55.1 lock rpm
The management component of Saltstack with zmq protocol supportedsalt-proxy3006.0-150500.4.55.1 lock rpm
Component for salt that enables controlling arbitrary devicessalt-ssh3006.0-150500.4.55.1 lock rpm
Management component for Saltstack with ssh protocolsalt-standalone-formulas-configuration3006.0-150500.4.55.1 lock rpm
Standalone Salt configuration to make the packaged formulas available for the Salt mastersalt-syndic3006.0-150500.4.55.1 lock rpm
The syndic component for saltstack3006.0-150500.4.55.1 lock rpm
Server Applications Module 15.6 x86_64
-
Packagessalt
A parallel remote execution systemsalt-api3006.0-150500.4.55.1 lock src
The api for Salt a parallel remote execution systemsalt-cloud3006.0-150500.4.55.1 lock rpm
Generic cloud provisioning tool for Saltstacksalt-fish-completion3006.0-150500.4.55.1 lock rpm
Fish Completion for saltsalt-master3006.0-150500.4.55.1 lock rpm
The management component of Saltstack with zmq protocol supportedsalt-proxy3006.0-150500.4.55.1 lock rpm
Component for salt that enables controlling arbitrary devicessalt-ssh3006.0-150500.4.55.1 lock rpm
Management component for Saltstack with ssh protocolsalt-standalone-formulas-configuration3006.0-150500.4.55.1 lock rpm
Standalone Salt configuration to make the packaged formulas available for the Salt mastersalt-syndic3006.0-150500.4.55.1 lock rpm
The syndic component for saltstack3006.0-150500.4.55.1 lock rpm