< back to search

gpp_maybe Security update for salt
SUSE-SLE-Module-Systems-Management-15-SP7-2025-2502

This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564) - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565) - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566) - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567) - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568) - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570) - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571) - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572) - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575) - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268) - Other bugs fixed: - Added subsystem filter to udev.exportdb (bsc#1236621) - Fixed Ubuntu 24.04 test failures - Fixed refresh of osrelease and related grains on Python 3.10+ - Fixed issue requiring proper Python flavor for dependencies

cloud_download Downloads

Systems Management Module 15.7 ppc64le
  • Packages
    python311-salt
    python3 library for salt
    3006.0-150700.14.5.2 lock rpm
    salt
    A parallel remote execution system
    3006.0-150700.14.5.2 lock rpm lock src
    salt-api
    The api for Salt a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-bash-completion
    Bash Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-doc
    Documentation for salt, a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-fish-completion
    Fish Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-master
    The management component of Saltstack with zmq protocol supported
    3006.0-150700.14.5.2 lock rpm
    salt-minion
    The client component for Saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-proxy
    Component for salt that enables controlling arbitrary devices
    3006.0-150700.14.5.2 lock rpm
    salt-ssh
    Management component for Saltstack with ssh protocol
    3006.0-150700.14.5.2 lock rpm
    salt-standalone-formulas-configuration
    Standalone Salt configuration to make the packaged formulas available for the Salt master
    3006.0-150700.14.5.2 lock rpm
    salt-syndic
    The syndic component for saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-transactional-update
    Transactional update executor configuration
    3006.0-150700.14.5.2 lock rpm
    salt-zsh-completion
    Zsh Completion for salt
    3006.0-150700.14.5.2 lock rpm
Systems Management Module 15.7 s390x
  • Packages
    python311-salt
    python3 library for salt
    3006.0-150700.14.5.2 lock rpm
    salt
    A parallel remote execution system
    3006.0-150700.14.5.2 lock rpm lock src
    salt-api
    The api for Salt a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-bash-completion
    Bash Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-doc
    Documentation for salt, a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-fish-completion
    Fish Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-master
    The management component of Saltstack with zmq protocol supported
    3006.0-150700.14.5.2 lock rpm
    salt-minion
    The client component for Saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-proxy
    Component for salt that enables controlling arbitrary devices
    3006.0-150700.14.5.2 lock rpm
    salt-ssh
    Management component for Saltstack with ssh protocol
    3006.0-150700.14.5.2 lock rpm
    salt-standalone-formulas-configuration
    Standalone Salt configuration to make the packaged formulas available for the Salt master
    3006.0-150700.14.5.2 lock rpm
    salt-syndic
    The syndic component for saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-transactional-update
    Transactional update executor configuration
    3006.0-150700.14.5.2 lock rpm
    salt-zsh-completion
    Zsh Completion for salt
    3006.0-150700.14.5.2 lock rpm
Systems Management Module 15.7 aarch64
  • Packages
    python311-salt
    python3 library for salt
    3006.0-150700.14.5.2 lock rpm
    salt
    A parallel remote execution system
    3006.0-150700.14.5.2 lock rpm lock src
    salt-api
    The api for Salt a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-bash-completion
    Bash Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-doc
    Documentation for salt, a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-fish-completion
    Fish Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-master
    The management component of Saltstack with zmq protocol supported
    3006.0-150700.14.5.2 lock rpm
    salt-minion
    The client component for Saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-proxy
    Component for salt that enables controlling arbitrary devices
    3006.0-150700.14.5.2 lock rpm
    salt-ssh
    Management component for Saltstack with ssh protocol
    3006.0-150700.14.5.2 lock rpm
    salt-standalone-formulas-configuration
    Standalone Salt configuration to make the packaged formulas available for the Salt master
    3006.0-150700.14.5.2 lock rpm
    salt-syndic
    The syndic component for saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-transactional-update
    Transactional update executor configuration
    3006.0-150700.14.5.2 lock rpm
    salt-zsh-completion
    Zsh Completion for salt
    3006.0-150700.14.5.2 lock rpm
Systems Management Module 15.7 x86_64
  • Packages
    python311-salt
    python3 library for salt
    3006.0-150700.14.5.2 lock rpm
    salt
    A parallel remote execution system
    3006.0-150700.14.5.2 lock rpm lock src
    salt-api
    The api for Salt a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-bash-completion
    Bash Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-doc
    Documentation for salt, a parallel remote execution system
    3006.0-150700.14.5.2 lock rpm
    salt-fish-completion
    Fish Completion for salt
    3006.0-150700.14.5.2 lock rpm
    salt-master
    The management component of Saltstack with zmq protocol supported
    3006.0-150700.14.5.2 lock rpm
    salt-minion
    The client component for Saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-proxy
    Component for salt that enables controlling arbitrary devices
    3006.0-150700.14.5.2 lock rpm
    salt-ssh
    Management component for Saltstack with ssh protocol
    3006.0-150700.14.5.2 lock rpm
    salt-standalone-formulas-configuration
    Standalone Salt configuration to make the packaged formulas available for the Salt master
    3006.0-150700.14.5.2 lock rpm
    salt-syndic
    The syndic component for saltstack
    3006.0-150700.14.5.2 lock rpm
    salt-transactional-update
    Transactional update executor configuration
    3006.0-150700.14.5.2 lock rpm
    salt-zsh-completion
    Zsh Completion for salt
    3006.0-150700.14.5.2 lock rpm