Salt 3005.5 Release Notes¶

Version 3005.5 is a CVE security fix release for 3005.

Security¶

Fix CVE-2024-22231 by preventing directory traversal when creating syndic cache directory on the master.
Fix CVE-2024-22232 Prevent directory traversal attacks in the master's serve_file method.

These vulnerablities were discovered and reported by: Yudi Zhao(Huawei Nebula Security Lab),Chenwei Jiang(Huawei Nebula Security Lab) (#565)

Generated on February 21, 2024 at 18:41:24 UTC.

You are viewing docs for the previous stable release, 3005.5. Switch to docs for the latest stable release, 3006.7, or to a recent doc build from the master branch.

saltproject.io