These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.
Salt 3004.2 Release Notes¶
Version 3004.2 is a CVE security fix release for 3004.
Fixed¶
Expand environment variables in the root_dir registry key (#61445)
Update Markup and contextfunction imports for jinja versions >=3.1. (#61848)
Fix bug in tcp transport (#61865)
Make sure the correct key is being used when verifying or validating communication, eg. when a Salt syndic is involved use syndic_master.pub and when a Salt minion is involved use minion_master.pub. (#61868)
Security¶
Fixed PAM auth to reject auth attempt if user account is locked. (cve-2022-22967)
