Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:02500-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:02500-1

UNKNOWN

Security update for salt

Published Jul 23, 2025

Modified 5 months ago

Fix available

Details

This update for salt fixes the following issues:

Security issues fixed:
- CVE-2024-38822: Fixed Minion token validation (bsc#1244561)
- CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)
- CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)
- CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)
- CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)
- CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)
- CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)
- CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)
- CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)
- CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574)
- CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)
- CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)
Other bugs fixed:
- Added subsystem filter to udev.exportdb (bsc#1236621)
- Fixed Ubuntu 24.04 test failures
- Fixed refresh of osrelease and related grains on Python 3.10+
- Fixed issue requiring proper Python flavor for dependencies

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsalt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpython3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsalt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.3python3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.3salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.3salt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.3salt-transactional-update

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.4python3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.4salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.4salt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Micro 5.4salt-transactional-update

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpython3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-transactional-update

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server 15 SP4-LTSSsalt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4python3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4salt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3python3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Proxy 4.3salt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3python3-salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-api

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-bash-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-cloud

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-doc

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-fish-completion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-master

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-minion

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-proxy

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-ssh

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-standalone-formulas-configuration

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-syndic

Fixed in:

3006.0-150400.8.80.1

SUSE:Manager Server 4.3salt-zsh-completion

Fixed in:

3006.0-150400.8.80.1

References

REPORThttps://bugzilla.suse.com/1236621 REPORThttps://bugzilla.suse.com/1243268 REPORThttps://bugzilla.suse.com/1244561 REPORThttps://bugzilla.suse.com/1244564 REPORThttps://bugzilla.suse.com/1244565 REPORThttps://bugzilla.suse.com/1244566 REPORThttps://bugzilla.suse.com/1244567 REPORThttps://bugzilla.suse.com/1244568 REPORThttps://bugzilla.suse.com/1244570 REPORThttps://bugzilla.suse.com/1244571 REPORThttps://bugzilla.suse.com/1244572 REPORThttps://bugzilla.suse.com/1244574 REPORThttps://bugzilla.suse.com/1244575 WEBhttps://www.suse.com/security/cve/CVE-2024-38822 WEBhttps://www.suse.com/security/cve/CVE-2024-38823 WEBhttps://www.suse.com/security/cve/CVE-2024-38824 WEBhttps://www.suse.com/security/cve/CVE-2024-38825 WEBhttps://www.suse.com/security/cve/CVE-2025-22236 WEBhttps://www.suse.com/security/cve/CVE-2025-22237 WEBhttps://www.suse.com/security/cve/CVE-2025-22238 WEBhttps://www.suse.com/security/cve/CVE-2025-22239 WEBhttps://www.suse.com/security/cve/CVE-2025-22240 WEBhttps://www.suse.com/security/cve/CVE-2025-22241 WEBhttps://www.suse.com/security/cve/CVE-2025-22242 WEBhttps://www.suse.com/security/cve/CVE-2025-47287 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202502500-1/