{"id":"CVE-2023-20897","aliases":["EUVD-2023-0230","GHSA-vpjg-wmf8-29h9","PYSEC-2023-166","SUSE-EL-9-CLIENT-TOOLS-2023-3884","SUSE-SU-2023:3862-1","SUSE-SU-2023:3863-1","SUSE-SU-2023:3864-1","SUSE-SU-2023:3865-1","SUSE-SU-2023:3866-1","SUSE-SU-2023:3876-1","SUSE-SU-2023:3877-1","SUSE-SU-2023:3884-1","SUSE-SU-2023:3885-1","UBUNTU-CVE-2023-20897","openSUSE-SU-2024:13188-1"],"status":"published","title":"Salt vulnerable to denial of service","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01245,"percentile":0.69661,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-404"],"published":"2023-09-05T10:56:33Z","modified":"2026-10-28T02:30:47Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3005.2","3006.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.2"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005rc1","3005rc2"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.2"}]}],"versions":["3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0"},{"fixed":"3006.2"},{"introduced":"0"},{"fixed":"3005.2"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005rc1","3005rc2","3006.0","3006.1"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundle-libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.10-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.10-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.32-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-kiwi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.24.43-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.1-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyxattr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.1-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211001.fc6c04e-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.61.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]}],"products":[{"vendor":"salt project","product":"salt"},{"vendor":"saltstack","product":"salt"}],"references":[{"url":"https://saltproject.io/security-announcements/2023-08-10-advisory/","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20897","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL","tags":["web"]},{"url":"https://saltproject.io/security-announcements/2023-08-10-advisory","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vpjg-wmf8-29h9","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20897.json","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2023-3884/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193948","tags":["report"]},{"url":"https://bugzilla.suse.com/1210994","tags":["report"]},{"url":"https://bugzilla.suse.com/1212794","tags":["report"]},{"url":"https://bugzilla.suse.com/1212844","tags":["report"]},{"url":"https://bugzilla.suse.com/1212855","tags":["report"]},{"url":"https://bugzilla.suse.com/1213257","tags":["report"]},{"url":"https://bugzilla.suse.com/1213441","tags":["report"]},{"url":"https://bugzilla.suse.com/1213630","tags":["report"]},{"url":"https://bugzilla.suse.com/1213960","tags":["report"]},{"url":"https://bugzilla.suse.com/1214796","tags":["report"]},{"url":"https://bugzilla.suse.com/1214797","tags":["report"]},{"url":"https://bugzilla.suse.com/1215489","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233862-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233863-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233864-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233865-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233866-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233876-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233877-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233884-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233885-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207330","tags":["report"]},{"url":"https://bugzilla.suse.com/1208692","tags":["report"]},{"url":"https://bugzilla.suse.com/1210935","tags":["report"]},{"url":"https://bugzilla.suse.com/1211525","tags":["report"]},{"url":"https://bugzilla.suse.com/1211874","tags":["report"]},{"url":"https://bugzilla.suse.com/1211884","tags":["report"]},{"url":"https://bugzilla.suse.com/1212246","tags":["report"]},{"url":"https://bugzilla.suse.com/1212730","tags":["report"]},{"url":"https://bugzilla.suse.com/1212814","tags":["report"]},{"url":"https://bugzilla.suse.com/1212827","tags":["report"]},{"url":"https://bugzilla.suse.com/1212856","tags":["report"]},{"url":"https://bugzilla.suse.com/1212943","tags":["report"]},{"url":"https://bugzilla.suse.com/1213009","tags":["report"]},{"url":"https://bugzilla.suse.com/1213077","tags":["report"]},{"url":"https://bugzilla.suse.com/1213288","tags":["report"]},{"url":"https://bugzilla.suse.com/1213445","tags":["report"]},{"url":"https://bugzilla.suse.com/1213469","tags":["report"]},{"url":"https://bugzilla.suse.com/1213675","tags":["report"]},{"url":"https://bugzilla.suse.com/1213716","tags":["report"]},{"url":"https://bugzilla.suse.com/1213880","tags":["report"]},{"url":"https://bugzilla.suse.com/1214002","tags":["report"]},{"url":"https://bugzilla.suse.com/1214121","tags":["report"]},{"url":"https://bugzilla.suse.com/1214124","tags":["report"]},{"url":"https://bugzilla.suse.com/1214187","tags":["report"]},{"url":"https://bugzilla.suse.com/1214266","tags":["report"]},{"url":"https://bugzilla.suse.com/1214280","tags":["report"]},{"url":"https://bugzilla.suse.com/1214889","tags":["report"]},{"url":"https://bugzilla.suse.com/1214982","tags":["report"]},{"url":"https://bugzilla.suse.com/1215352","tags":["report"]},{"url":"https://bugzilla.suse.com/1215362","tags":["report"]},{"url":"https://bugzilla.suse.com/1215413","tags":["report"]},{"url":"https://bugzilla.suse.com/1215497","tags":["report"]},{"url":"https://bugzilla.suse.com/1215756","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29409","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-20897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20897","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-20897","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T10:56:33.183Z","modified":"2025-02-13T16:40:09.607Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:13.368958Z"}],"euvd":[{"id":"EUVD-2023-0230","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T10:56:33Z","modified":"2025-02-13T16:40:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:51.861062Z"}],"ghsa":[{"id":"GHSA-vpjg-wmf8-29h9","title":"Salt vulnerable to denial of service","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T12:30:16Z","modified":"2025-02-13T19:11:44Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:38:31.416868Z"}],"nvd":[{"id":"CVE-2023-20897","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T11:15:32.973Z","modified":"2026-06-17T05:31:08.5Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"CVE-2023-20897","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T10:56:33.183Z","modified":"2026-10-28T02:30:47.637176469Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"GHSA-vpjg-wmf8-29h9","title":"Salt vulnerable to denial of service","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T12:30:16Z","modified":"2025-02-13T19:36:48.098102Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T15:46:57.694388Z"},{"id":"PYSEC-2023-166","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.\n","status":"published","published":"2023-09-05T11:15:00Z","modified":"2026-06-10T17:02:40.153819414Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"UBUNTU-CVE-2023-20897","description":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.","status":"published","published":"2023-09-05T11:15:00Z","modified":"2026-04-08T14:12:30.486569Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"openSUSE-SU-2024:13188-1","title":"python3-salt-3006.0-4.1 on GA media","description":"These are all security issues fixed in the python3-salt-3006.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:40.523495Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2023-3884","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:51:44Z","modified":"2026-07-24T18:24:18.247211757Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2023:3862-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n  \nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:38:21Z","modified":"2026-02-04T03:56:28.656211Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3863-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:39:24Z","modified":"2026-02-04T02:39:57.874758Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3864-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n  \nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:40:37Z","modified":"2026-02-04T02:59:13.305412Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3865-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:41:07Z","modified":"2026-02-04T04:24:52.887464Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3866-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:41:34Z","modified":"2025-05-02T04:34:28.534644Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3876-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:46:14Z","modified":"2026-02-04T03:41:28.843944Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3877-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:47:21Z","modified":"2026-02-04T03:27:17.094733Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3884-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:51:44Z","modified":"2026-02-04T04:28:05.396817Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3885-1","title":"Security update for SUSE Manager Server 4.3","description":"This update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.8\n  * Important Salt minion update\n  * SUSE Manager Pay-as-you-go (PAYG)\n  * Automated RHUI credential update\n  * Monitoring: Prometheus upgraded to 2.45.0\n  * Monitoring: Apache exporter updated to version 1.0.0\n  * Expose lastBuildDate property (last build/promote date of an\n    environment) through contentlifecycle API (jsc#SUMA-280)\n  * Add saltboot redeploy and repartition based on pillars (jsc#SUMA-158)  \n  * Security CVE issues fixed:\n    CVE-2023-29409, CVE-2023-20897, CVE-2023-20898\n  * Bugs mentioned\n    bsc#1207330, bsc#1208692, bsc#1210935, bsc#1211525, bsc#1211874\n    bsc#1211884, bsc#1212246, bsc#1212730, bsc#1212814, bsc#1212827\n    bsc#1212856, bsc#1212943, bsc#1213009, bsc#1213077, bsc#1213288\n    bsc#1213445, bsc#1213675, bsc#1213716, bsc#1213880, bsc#1214002\n    bsc#1214121, bsc#1214124, bsc#1214187, bsc#1214266, bsc#1214280\n    bsc#1214889, bsc#1214982, bsc#1215352, bsc#1215362, bsc#1215497\n    bsc#1193948, bsc#1214797, bsc#1213441, bsc#1214796, bsc#1213469\n    bsc#1215413, bsc#1215756\n\n","status":"published","published":"2023-09-28T11:52:11Z","modified":"2026-02-04T04:00:17.589162Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}