Package salt updated to version 3006.6-alt1 for branch sisyphus in task 340692.

Published: 2024-06-27
Modified: 2024-11-21

CVE-2024-22231

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

References:

https://saltproject.io/security-announcements/2024-01-31-advisory/
https://saltproject.io/security-announcements/2024-01-31-advisory/

Published: 2024-06-27
Modified: 2024-11-21

CVE-2024-22232

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

References:

https://saltproject.io/security-announcements/2024-01-31-advisory/
https://saltproject.io/security-announcements/2024-01-31-advisory/

Version: 2.1.0

Package salt update in sisyphus on 2024-02-21

ALT-PU-2024-2460-3

Closed vulnerabilities

CVE-2024-22231

CVE-2024-22232