{"id":"CVE-2023-20898","aliases":["EUVD-2023-0231","GHSA-qvh6-3j7x-3hq7","PYSEC-2023-169","SUSE-EL-9-CLIENT-TOOLS-2023-3884","SUSE-SU-2023:3862-1","SUSE-SU-2023:3863-1","SUSE-SU-2023:3864-1","SUSE-SU-2023:3865-1","SUSE-SU-2023:3866-1","SUSE-SU-2023:3876-1","SUSE-SU-2023:3877-1","SUSE-SU-2023:3884-1","SUSE-SU-2023:3885-1","UBUNTU-CVE-2023-20898","openSUSE-SU-2024:13188-1"],"status":"published","title":"Salt can cause Git Providers to get wrong data","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00318,"percentile":0.24986,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-09-05T10:59:10Z","modified":"2026-10-28T02:30:25Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3005.2","3006.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.2"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005rc1","3005rc2"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.2"}]}],"versions":["3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0"},{"fixed":"3006.2"},{"introduced":"0"},{"fixed":"3005.2"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005rc1","3005rc2","3006.0","3006.1"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.60.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.108.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.107.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.42.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundle-libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.10-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.10-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.32-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-kiwi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.24.43-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.1-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyxattr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.1-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211001.fc6c04e-1.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.61.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]}],"products":[{"vendor":"salt project","product":"salt"},{"vendor":"saltstack","product":"salt"}],"references":[{"url":"https://saltproject.io/security-announcements/2023-08-10-advisory/","tags":["x_transferred","Mitigation","Vendor Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20898","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL","tags":["web"]},{"url":"https://saltproject.io/security-announcements/2023-08-10-advisory","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qvh6-3j7x-3hq7","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20898.json","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2023-3884/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193948","tags":["report"]},{"url":"https://bugzilla.suse.com/1210994","tags":["report"]},{"url":"https://bugzilla.suse.com/1212794","tags":["report"]},{"url":"https://bugzilla.suse.com/1212844","tags":["report"]},{"url":"https://bugzilla.suse.com/1212855","tags":["report"]},{"url":"https://bugzilla.suse.com/1213257","tags":["report"]},{"url":"https://bugzilla.suse.com/1213441","tags":["report"]},{"url":"https://bugzilla.suse.com/1213630","tags":["report"]},{"url":"https://bugzilla.suse.com/1213960","tags":["report"]},{"url":"https://bugzilla.suse.com/1214796","tags":["report"]},{"url":"https://bugzilla.suse.com/1214797","tags":["report"]},{"url":"https://bugzilla.suse.com/1215489","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233862-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233863-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233864-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233865-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233866-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233876-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233877-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233884-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233885-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207330","tags":["report"]},{"url":"https://bugzilla.suse.com/1208692","tags":["report"]},{"url":"https://bugzilla.suse.com/1210935","tags":["report"]},{"url":"https://bugzilla.suse.com/1211525","tags":["report"]},{"url":"https://bugzilla.suse.com/1211874","tags":["report"]},{"url":"https://bugzilla.suse.com/1211884","tags":["report"]},{"url":"https://bugzilla.suse.com/1212246","tags":["report"]},{"url":"https://bugzilla.suse.com/1212730","tags":["report"]},{"url":"https://bugzilla.suse.com/1212814","tags":["report"]},{"url":"https://bugzilla.suse.com/1212827","tags":["report"]},{"url":"https://bugzilla.suse.com/1212856","tags":["report"]},{"url":"https://bugzilla.suse.com/1212943","tags":["report"]},{"url":"https://bugzilla.suse.com/1213009","tags":["report"]},{"url":"https://bugzilla.suse.com/1213077","tags":["report"]},{"url":"https://bugzilla.suse.com/1213288","tags":["report"]},{"url":"https://bugzilla.suse.com/1213445","tags":["report"]},{"url":"https://bugzilla.suse.com/1213469","tags":["report"]},{"url":"https://bugzilla.suse.com/1213675","tags":["report"]},{"url":"https://bugzilla.suse.com/1213716","tags":["report"]},{"url":"https://bugzilla.suse.com/1213880","tags":["report"]},{"url":"https://bugzilla.suse.com/1214002","tags":["report"]},{"url":"https://bugzilla.suse.com/1214121","tags":["report"]},{"url":"https://bugzilla.suse.com/1214124","tags":["report"]},{"url":"https://bugzilla.suse.com/1214187","tags":["report"]},{"url":"https://bugzilla.suse.com/1214266","tags":["report"]},{"url":"https://bugzilla.suse.com/1214280","tags":["report"]},{"url":"https://bugzilla.suse.com/1214889","tags":["report"]},{"url":"https://bugzilla.suse.com/1214982","tags":["report"]},{"url":"https://bugzilla.suse.com/1215352","tags":["report"]},{"url":"https://bugzilla.suse.com/1215362","tags":["report"]},{"url":"https://bugzilla.suse.com/1215413","tags":["report"]},{"url":"https://bugzilla.suse.com/1215497","tags":["report"]},{"url":"https://bugzilla.suse.com/1215756","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29409","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-20898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20898","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-20898","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T10:59:10.439Z","modified":"2025-02-13T16:40:10.201Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:13.368958Z"}],"euvd":[{"id":"EUVD-2023-0231","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T10:59:10Z","modified":"2025-02-13T16:40:10Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:03:51.861062Z"}],"ghsa":[{"id":"GHSA-qvh6-3j7x-3hq7","title":"Salt can cause Git Providers to get wrong data","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T12:30:16Z","modified":"2025-02-13T19:11:47Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T14:38:31.416868Z"}],"nvd":[{"id":"CVE-2023-20898","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T11:15:33.3Z","modified":"2026-06-17T05:31:08.623Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"CVE-2023-20898","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T10:59:10.439Z","modified":"2026-10-28T02:30:25.008428982Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"GHSA-qvh6-3j7x-3hq7","title":"Salt can cause Git Providers to get wrong data","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T12:30:16Z","modified":"2025-02-13T19:35:44.252803Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:46:55.122811Z"},{"id":"PYSEC-2023-169","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.\n","status":"published","published":"2023-09-05T11:15:00Z","modified":"2026-06-10T17:02:40.189111404Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"UBUNTU-CVE-2023-20898","description":"Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.","status":"published","published":"2023-09-05T11:15:00Z","modified":"2026-04-02T19:19:29.562291Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"openSUSE-SU-2024:13188-1","title":"python3-salt-3006.0-4.1 on GA media","description":"These are all security issues fixed in the python3-salt-3006.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:40.523495Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2023-3884","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:51:44Z","modified":"2026-07-24T18:24:18.247211757Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2023:3862-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n  \nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:38:21Z","modified":"2026-02-04T03:56:28.656211Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3863-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:39:24Z","modified":"2026-02-04T02:39:57.874758Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3864-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n  \nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:40:37Z","modified":"2026-02-04T02:59:13.305412Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3865-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:41:07Z","modified":"2026-02-04T04:24:52.887464Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3866-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)\n- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base\n  name. (bsc#1214797, bsc#1193948)\n\nBugs fixed:\n\n- Create minion_id with reproducible mtime\n- Fix broken tests to make them running in the testsuite\n- Fix detection of Salt codename by 'salt_version' execution module\n- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n- Fix the regression of user.present state when group is unset (bsc#1212855)\n- Fix utf8 handling in 'pass' renderer and make it more robust\n- Fix zypper repositories always being reconfigured\n- Make sure configured user is properly set by Salt (bsc#1210994)\n- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses\n  (bsc#1213960, bsc#1213630, bsc#1213257)\n","status":"published","published":"2023-09-28T11:41:34Z","modified":"2025-05-02T04:34:28.534644Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3876-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:46:14Z","modified":"2026-02-04T03:41:28.843944Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3877-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:47:21Z","modified":"2026-02-04T03:27:17.094733Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3884-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:  \n  * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441)  \n  * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory\n    base name. (bsc#1214797, bsc#1193948)\n- Bugs fixed:\n  * Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated\n    responses (bsc#1213960, bsc#1213630, bsc#1213257)\n  * Create minion_id with reproducible mtime\n  * Do not recompile SELinux policy module on building. Use precompiled module instead to avoid incompatibility errors.\n  * Fix broken tests to make them running in the testsuite\n  * Fix detection of Salt codename by 'salt_version' execution module\n  * Fix inconsistency in reported version by egg-info metadata (bsc#1215489)\n  * Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)\n  * Fix the regression of user.present state when group is unset (bsc#1212855)\n  * Fix utf8 handling in 'pass' renderer and make it more robust\n  * Fix zypper repositories always being reconfigured\n  * Make sure configured user is properly set by Salt (bsc#1210994)\n  * Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)\n  * Ship SELinux policy module version 19 to make it compatible with broader list of Linux distributions\n","status":"published","published":"2023-09-28T11:51:44Z","modified":"2026-02-04T04:28:05.396817Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3885-1","title":"Security update for SUSE Manager Server 4.3","description":"This update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.8\n  * Important Salt minion update\n  * SUSE Manager Pay-as-you-go (PAYG)\n  * Automated RHUI credential update\n  * Monitoring: Prometheus upgraded to 2.45.0\n  * Monitoring: Apache exporter updated to version 1.0.0\n  * Expose lastBuildDate property (last build/promote date of an\n    environment) through contentlifecycle API (jsc#SUMA-280)\n  * Add saltboot redeploy and repartition based on pillars (jsc#SUMA-158)  \n  * Security CVE issues fixed:\n    CVE-2023-29409, CVE-2023-20897, CVE-2023-20898\n  * Bugs mentioned\n    bsc#1207330, bsc#1208692, bsc#1210935, bsc#1211525, bsc#1211874\n    bsc#1211884, bsc#1212246, bsc#1212730, bsc#1212814, bsc#1212827\n    bsc#1212856, bsc#1212943, bsc#1213009, bsc#1213077, bsc#1213288\n    bsc#1213445, bsc#1213675, bsc#1213716, bsc#1213880, bsc#1214002\n    bsc#1214121, bsc#1214124, bsc#1214187, bsc#1214266, bsc#1214280\n    bsc#1214889, bsc#1214982, bsc#1215352, bsc#1215362, bsc#1215497\n    bsc#1193948, bsc#1214797, bsc#1213441, bsc#1214796, bsc#1213469\n    bsc#1215413, bsc#1215756\n\n","status":"published","published":"2023-09-28T11:52:11Z","modified":"2026-02-04T04:00:17.589162Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}