{"id":"CVE-2025-22239","aliases":["EUVD-2025-18251","GHSA-c46w-gr7f-jm2p","PYSEC-2026-1897","SUSE-EL-9-CLIENT-TOOLS-2025-2499","SUSE-SU-2025:02476-1","SUSE-SU-2025:02491-1","SUSE-SU-2025:02492-1","SUSE-SU-2025:02499-1","SUSE-SU-2025:02500-1","SUSE-SU-2025:02501-1","SUSE-SU-2025:02502-1","SUSE-SU-2025:02534-1","SUSE-SU-2025:20487-1","SUSE-SU-2025:20504-1","UBUNTU-CVE-2025-22239","openSUSE-SU-2025:15295-1"],"status":"published","title":"CVE-2025-22239 salt advisory","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00189,"percentile":0.08586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-285"],"published":"2025-06-13T07:00:53Z","modified":"2026-07-24T18:24:19Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3006.12","3007.4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.12"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3007.0rc1"},{"fixed":"3007.4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.12"}]}],"versions":["3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1","3006.10","3006.11","3006.2","3006.3","3006.4","3006.5","3006.6","3006.7","3006.8","3006.9"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3007.0rc1"},{"fixed":"3007.4"}]}],"versions":["3007.0","3007.0rc1","3007.1","3007.2","3007.3"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0rc1"},{"fixed":"3006.12"},{"introduced":"3007.0rc1"},{"fixed":"3007.4"}]}],"versions":["3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1","3006.10","3006.11","3006.2","3006.3","3006.4","3006.5","3006.6","3006.7","3006.8","3006.9","3007.0","3007.0rc1","3007.1","3007.2","3007.3"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.59.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16-150400.3.98.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16-150400.3.140.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.76.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.78.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.78.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.78.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.78.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-1.32.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-1.32.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.37-1.12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-1.12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4-1.21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.12.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-msgpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1.14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11-1.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1.12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-zypp-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-1.11.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.59.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.59.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.80.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.55.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Systems Management 15 SP7","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150700.14.5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.94.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-slfo.1.1_4.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-41.1"}]}],"bundled":12}],"products":[{"vendor":"salt project","product":"salt"},{"vendor":"vmware","product":"salt"}],"references":[{"url":"https://docs.saltproject.io/en/3006/topics/releases/3006.12.html","tags":["web","report"]},{"url":"https://docs.saltproject.io/en/3007/topics/releases/3007.4.html","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22239","tags":["advisory"]},{"url":"https://github.com/saltstack/salt/commit/41d834bf800d86fc496e4fac2d3875fc2aca7c62","tags":["web"]},{"url":"https://github.com/advisories/GHSA-c46w-gr7f-jm2p","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://pypi.org/project/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2025-2499/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236621","tags":["report"]},{"url":"https://bugzilla.suse.com/1243268","tags":["report"]},{"url":"https://bugzilla.suse.com/1244561","tags":["report"]},{"url":"https://bugzilla.suse.com/1244564","tags":["report"]},{"url":"https://bugzilla.suse.com/1244565","tags":["report"]},{"url":"https://bugzilla.suse.com/1244566","tags":["report"]},{"url":"https://bugzilla.suse.com/1244567","tags":["report"]},{"url":"https://bugzilla.suse.com/1244568","tags":["report"]},{"url":"https://bugzilla.suse.com/1244570","tags":["report"]},{"url":"https://bugzilla.suse.com/1244571","tags":["report"]},{"url":"https://bugzilla.suse.com/1244572","tags":["report"]},{"url":"https://bugzilla.suse.com/1244574","tags":["report"]},{"url":"https://bugzilla.suse.com/1244575","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47287","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502476-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157520","tags":["report"]},{"url":"https://bugzilla.suse.com/1191142","tags":["report"]},{"url":"https://bugzilla.suse.com/1209060","tags":["report"]},{"url":"https://bugzilla.suse.com/1211373","tags":["report"]},{"url":"https://bugzilla.suse.com/1213952","tags":["report"]},{"url":"https://bugzilla.suse.com/1216187","tags":["report"]},{"url":"https://bugzilla.suse.com/1221031","tags":["report"]},{"url":"https://bugzilla.suse.com/1225740","tags":["report"]},{"url":"https://bugzilla.suse.com/1230403","tags":["report"]},{"url":"https://bugzilla.suse.com/1230908","tags":["report"]},{"url":"https://bugzilla.suse.com/1233371","tags":["report"]},{"url":"https://bugzilla.suse.com/1234608","tags":["report"]},{"url":"https://bugzilla.suse.com/1236635","tags":["report"]},{"url":"https://bugzilla.suse.com/1236779","tags":["report"]},{"url":"https://bugzilla.suse.com/1236810","tags":["report"]},{"url":"https://bugzilla.suse.com/1236877","tags":["report"]},{"url":"https://bugzilla.suse.com/1236910","tags":["report"]},{"url":"https://bugzilla.suse.com/1237060","tags":["report"]},{"url":"https://bugzilla.suse.com/1237082","tags":["report"]},{"url":"https://bugzilla.suse.com/1237294","tags":["report"]},{"url":"https://bugzilla.suse.com/1237403","tags":["report"]},{"url":"https://bugzilla.suse.com/1237581","tags":["report"]},{"url":"https://bugzilla.suse.com/1237694","tags":["report"]},{"url":"https://bugzilla.suse.com/1237770","tags":["report"]},{"url":"https://bugzilla.suse.com/1238922","tags":["report"]},{"url":"https://bugzilla.suse.com/1238924","tags":["report"]},{"url":"https://bugzilla.suse.com/1239102","tags":["report"]},{"url":"https://bugzilla.suse.com/1239154","tags":["report"]},{"url":"https://bugzilla.suse.com/1239604","tags":["report"]},{"url":"https://bugzilla.suse.com/1239743","tags":["report"]},{"url":"https://bugzilla.suse.com/1239826","tags":["report"]},{"url":"https://bugzilla.suse.com/1239868","tags":["report"]},{"url":"https://bugzilla.suse.com/1239907","tags":["report"]},{"url":"https://bugzilla.suse.com/1240038","tags":["report"]},{"url":"https://bugzilla.suse.com/1240386","tags":["report"]},{"url":"https://bugzilla.suse.com/1240666","tags":["report"]},{"url":"https://bugzilla.suse.com/1240842","tags":["report"]},{"url":"https://bugzilla.suse.com/1241239","tags":["report"]},{"url":"https://bugzilla.suse.com/1241286","tags":["report"]},{"url":"https://bugzilla.suse.com/1241455","tags":["report"]},{"url":"https://bugzilla.suse.com/1241490","tags":["report"]},{"url":"https://bugzilla.suse.com/1242004","tags":["report"]},{"url":"https://bugzilla.suse.com/1242030","tags":["report"]},{"url":"https://bugzilla.suse.com/1242148","tags":["report"]},{"url":"https://bugzilla.suse.com/1242554","tags":["report"]},{"url":"https://bugzilla.suse.com/1242911","tags":["report"]},{"url":"https://bugzilla.suse.com/1243239","tags":["report"]},{"url":"https://bugzilla.suse.com/1243460","tags":["report"]},{"url":"https://bugzilla.suse.com/1243724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243825","tags":["report"]},{"url":"https://bugzilla.suse.com/1244065","tags":["report"]},{"url":"https://bugzilla.suse.com/1244290","tags":["report"]},{"url":"https://bugzilla.suse.com/1245005","tags":["report"]},{"url":"https://bugzilla.suse.com/1245027","tags":["report"]},{"url":"https://bugzilla.suse.com/1245222","tags":["report"]},{"url":"https://bugzilla.suse.com/1245368","tags":["report"]},{"url":"https://bugzilla.suse.com/1246119","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46811","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502491-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502492-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502499-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502500-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502501-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502502-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502534-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520487-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520504-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1238686","tags":["report"]},{"url":"https://bugzilla.suse.com/1238849","tags":["report"]},{"url":"https://bugzilla.suse.com/1238929","tags":["report"]},{"url":"https://bugzilla.suse.com/1240626","tags":["report"]},{"url":"https://bugzilla.suse.com/1240698","tags":["report"]},{"url":"https://bugzilla.suse.com/1242174","tags":["report"]},{"url":"https://bugzilla.suse.com/1243105","tags":["report"]},{"url":"https://bugzilla.suse.com/1243274","tags":["report"]},{"url":"https://bugzilla.suse.com/1243297","tags":["report"]},{"url":"https://bugzilla.suse.com/1243802","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-22239","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22239","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-22239","title":"CVE-2025-22239 salt advisory","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T07:00:53.681Z","modified":"2025-06-13T13:53:14.907Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:32:28.943062Z"}],"euvd":[{"id":"EUVD-2025-18251","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T07:00:53Z","modified":"2025-06-13T13:53:14Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T20:32:24.065864Z"}],"ghsa":[{"id":"GHSA-c46w-gr7f-jm2p","title":"Salt vulnerable to arbitrary event injection","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T09:30:33Z","modified":"2025-06-13T21:22:05Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:38:46.901955Z"}],"nvd":[{"id":"CVE-2025-22239","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T07:15:21.29Z","modified":"2026-06-17T08:45:50.36Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:11:11.789448Z"}],"osv":[{"id":"GHSA-c46w-gr7f-jm2p","title":"Salt vulnerable to arbitrary event injection","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T09:30:33Z","modified":"2026-07-07T17:57:07.578229336Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T15:46:44.571161Z"},{"id":"PYSEC-2026-1897","title":"Salt vulnerable to arbitrary event injection","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2026-07-07T16:02:54.610007Z","modified":"2026-07-07T17:48:09.263033368Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"UBUNTU-CVE-2025-22239","description":"Arbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","status":"published","published":"2025-06-13T07:15:00Z","modified":"2026-04-08T14:50:39.468869Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"openSUSE-SU-2025:15295-1","title":"python311-salt-3006.0-41.1 on GA media","description":"These are all security issues fixed in the python311-salt-3006.0-41.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:36.339505Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2025-2499","title":"Security update 5.0.5 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n    \n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n  - Fixed VIRTUAL_ENV variable in activate file to point to actual path\n  - Fixed the bundle path in pyvenv.cfg\n  - Prevent tests failures when pygit2 is not present\n\n","status":"published","published":"2025-07-23T12:46:00Z","modified":"2026-07-24T18:24:19.648178682Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2025:02476-1","title":"Security update 4.3.16 for Multi-Linux Manager Server","description":"This update fixes the following issues:\n    \nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.16\n  * Important Salt Security Update\n  * Added support for SUSE Linux Enterprise 15 SP7 as a client\n    using the Salt Bundle\n  * CVE Fixed\n    CVE-2025-23392, CVE-2025-23393, CVE-2024-38824, CVE-2025-22239\n    CVE-2025-22236, CVE-2025-22237, CVE-2024-38825, CVE-2025-22240\n    CVE-2024-38823, CVE-2025-22241, CVE-2025-22238, CVE-2025-22242\n    CVE-2024-38822, CVE-2025-46811, CVE-2025-46809\n  * Bugs mentioned:\n    bsc#1157520, bsc#1191142, bsc#1209060, bsc#1211373, bsc#1213952\n    bsc#1216187, bsc#1221031, bsc#1225740, bsc#1230403, bsc#1230908\n    bsc#1233371, bsc#1234608, bsc#1236635, bsc#1236779, bsc#1236810\n    bsc#1236877, bsc#1236910, bsc#1237060, bsc#1237082, bsc#1237294\n    bsc#1237403, bsc#1237581, bsc#1237694, bsc#1237770, bsc#1238922\n    bsc#1238924, bsc#1239102, bsc#1239154, bsc#1239604, bsc#1239743\n    bsc#1239826, bsc#1239868, bsc#1239907, bsc#1240038, bsc#1240386\n    bsc#1240666, bsc#1240842, bsc#1241239, bsc#1241286, bsc#1241455\n    bsc#1241490, bsc#1242004, bsc#1242030, bsc#1242148, bsc#1242554\n    bsc#1242911, bsc#1243239, bsc#1243460, bsc#1243724, bsc#1243825\n    bsc#1244065, bsc#1244290, bsc#1245027, bsc#1245222, bsc#1245368\n    bsc#1245005, bsc#1246119\n\n","status":"published","published":"2025-07-23T12:37:12Z","modified":"2026-03-23T04:46:38.275132Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02491-1","title":"Security update 5.0.5 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n    \n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n  - Fixed VIRTUAL_ENV variable in activate file to point to actual path\n  - Fixed the bundle path in pyvenv.cfg\n  - Prevent tests failures when pygit2 is not present\n\n","status":"published","published":"2025-07-23T12:43:13Z","modified":"2026-03-23T04:48:36.470595Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02492-1","title":"Security update 5.0.5 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n    \n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n  - Fixed VIRTUAL_ENV variable in activate file to point to actual path\n  - Fixed the bundle path in pyvenv.cfg\n  - Prevent tests failures when pygit2 is not present\n\n","status":"published","published":"2025-07-23T12:43:53Z","modified":"2026-03-23T04:47:46.886127Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02499-1","title":"Security update 5.0.5 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n    \n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n  - Fixed VIRTUAL_ENV variable in activate file to point to actual path\n  - Fixed the bundle path in pyvenv.cfg\n  - Prevent tests failures when pygit2 is not present\n\n","status":"published","published":"2025-07-23T12:46:00Z","modified":"2026-03-23T04:47:47.135427Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02500-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n","status":"published","published":"2025-07-23T12:46:43Z","modified":"2026-03-23T04:49:43.006703Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02501-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n","status":"published","published":"2025-07-23T12:47:18Z","modified":"2026-03-23T04:49:43.134385Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02502-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n","status":"published","published":"2025-07-23T12:48:03Z","modified":"2026-03-23T04:46:38.564444Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02534-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n","status":"published","published":"2025-07-28T12:45:29Z","modified":"2026-03-23T04:46:39.121099Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:20487-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Fixed Ubuntu 24.04 edge-case test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n\n","status":"published","published":"2025-07-23T13:41:40Z","modified":"2026-03-23T04:48:17.465525Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20504-1","title":"Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle","description":"This update fixes the following issues:\n\ngolang-github-prometheus-node_exporter:\n\n- Security issues fixed:\n  \n  - CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a\n    hostname component (bsc#1238686)\n\n- Other bugs fixed:\n\n  - Fixed Darwin memory leak\n  - pressure: Fix missing IRQ on older kernels\n\nsalt, venv-salt-minion:\n\n- Security issues fixed:\n  \n  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)\n  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)\n  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)\n  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)\n  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)\n  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)\n  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)\n  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)\n  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)\n  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) \n  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)\n  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)\n\n- Other bugs fixed:\n\n  - Added subsystem filter to udev.exportdb (bsc#1236621)\n  - Added `minion_legacy_req_warnings` option to avoid noisy warnings\n  - Fixed Ubuntu 24.04 edge-case test failures\n  - Fixed refresh of osrelease and related grains on Python 3.10+\n  - Fixed issue requiring proper Python flavor for dependencies\n  - Require M2Crypto version 0.44.0 or higher\n  - venv-salt-minion: Fixed bundle path in pyvenv.cfg\n\nuyuni-tools:\n    \n- Version 0.1.31-0:\n\n  - Added the info message about End User License Agreement\n  - Don't migrate py2*-compat-salt.conf files (bsc#1240626)\n  - Check for restorecon before using it (bsc#1240698)\n  - Adjust the distro path in cobbler files after migration\n    (bsc#1238929)\n  - Added mgradm support ptf podman --pullPolicy flag (bsc#1236877)\n  - Support: don't dump files in bound folders (bsc#1243297)\n  - Cleanup host supportconfig files (bsc#1242174)\n  - During migration, check if backup already exists (bsc#1243105)\n  - Removed SHM size limits from all containers (bsc#1243274)\n  - Don't migrate /etc/apache2/vhosts.d/cobbler.conf\n  - Fixed migration --prepare for autoinstallable distributions (bsc#1243802)\n  - Skip instalation if the server is already set up (bsc#1238849)\n  - Bumped the default image tag to 5.0.5\n\n","status":"published","published":"2025-07-23T13:34:01Z","modified":"2026-03-23T04:50:51.124485Z","updated_at":"2026-11-02T15:53:59.92114Z"}]}}