CVE catalog

CVE-2023-34049

Security update for salt

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.19% · Oct 25, 2026

This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for autosign_grains (bsc#1214477) * Remove non-free RNG schema file (bsc#1213351)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susevenv-salt-minionmanager client tools for rhel, liberty and clones 9-client-tools3006.0-1.30.3fixed
Ubuntusaltpro2016.11.5+ds-1vulnerable
Ubuntusaltpro2016.11.8+dfsg1-1vulnerable
Ubuntusaltpro2017.7.2+dfsg1-2ubuntu1vulnerable
Ubuntusaltpro2017.7.3+dfsg1-1vulnerable
Ubuntusaltpro2017.7.4+dfsg1-1vulnerable
Ubuntusaltpro2017.7.4+dfsg1-1ubuntu18.04.1vulnerable
Ubuntusaltpro2017.7.4+dfsg1-1ubuntu18.04.2vulnerable
Ubuntusaltpro2017.7.4+dfsg1-1ubuntu18.04.2+esm1vulnerable
Ubuntusalt22.043002.6+dfsg1-4vulnerable
Ubuntusalt22.043002.7+dfsg1-1vulnerable
Ubuntusalt22.043004+dfsg1-4vulnerable
Ubuntusalt22.043004+dfsg1-5vulnerable
Ubuntusalt22.043004+dfsg1-6ubuntu1vulnerable
Ubuntusalt22.043004+dfsg1-7vulnerable
Ubuntusalt22.043004+dfsg1-8vulnerable
Ubuntusalt22.043004.1+dfsg-2vulnerable
Susesaltbundle-swigel-94.1.1-1.9.1fixed
Susesaltbundlepy-appdirsel-91.4.4-1.6.1fixed
Susesaltbundlepy-certifiel-92018.1.18-1.9.1fixed
Susesaltbundlepy-cffiel-91.15.1-1.9.1fixed
Susesaltbundlepy-dateutilel-92.8.1-1.3.4fixed
Susesaltbundlepy-editablesel-90.3-1.3.1fixed
Susesaltbundlepy-exceptiongroupel-91.1.0-1.3.1fixed
Susesaltbundlepy-exceptiongroup-testel-91.1.0-1.3.1fixed
Susesaltbundlepy-flit-coreel-93.8.0-1.3.1fixed
Susesaltbundlepy-flit-scmel-91.7.0-1.3.1fixed
Susesaltbundlepy-hatch-vcsel-90.3.0-1.3.1fixed
Susesaltbundlepy-hatch-vcs-testel-90.3.0-1.3.1fixed
Susesaltbundlepy-hatchlingel-91.13.0-1.3.1fixed
Susesaltbundlepy-iniconfigel-92.0.0-1.3.1fixed
Susesaltbundlepy-iniconfig-testel-92.0.0-1.3.1fixed
Susesaltbundlepy-lxmlel-94.9.3-1.12.1fixed
Susesaltbundlepy-more-itertoolsel-98.10.0-1.6.1fixed
Susesaltbundlepy-packagingel-923.1-1.6.1fixed
Susesaltbundlepy-pathspecel-90.11.1-1.3.1fixed
Susesaltbundlepy-pipel-920.2.4-1.6.1fixed
Susesaltbundlepy-pluggyel-91.0.0-1.6.4fixed
Susesaltbundlepy-pluggy-testel-91.0.0-1.6.1fixed
Susesaltbundlepy-pyel-91.10.0-1.9.4fixed
Susesaltbundlepy-pytestel-97.3.2-1.6.1fixed
Susesaltbundlepy-setuptools-scmel-97.1.0-1.6.1fixed
Susesaltbundlepy-tomliel-91.2.3-1.3.1fixed
Susesaltbundlepy-typing-extensionsel-94.5.0-1.3.1fixed
Susesaltbundlepy-typing-extensions-testel-94.5.0-1.3.1fixed
Susesaltbundlepy-wheelel-90.40.0-1.3.1fixed
Susesaltbundlepy-wheel-testel-90.40.0-1.3.1fixed
Susevenv-salt-minionel-93006.0-1.30.3fixed
Susevenv-salt-minionmanager client tools for rhel, liberty and clones 9-client-tools3006.0-1.30.3fixed
Susesaltlinux enterprise high performance computing 15 sp2-ltss3006.0-150200.113.1fixed
Susesaltlinux enterprise server 15 sp2-ltss3006.0-150200.113.1fixed
Susesaltlinux enterprise server for sap applications 15 sp23006.0-150200.113.1fixed
Susevenv-salt-minionmanager client tools 153006.0-150000.3.48.2fixed
Susevenv-salt-minionmanager client tools for sle micro 53006.0-150000.3.48.2fixed
Susevenv-salt-minionmanager proxy module 4.33006.0-150000.3.48.2fixed
Susevenv-salt-minionmanager server module 4.33006.0-150000.3.48.2fixed
Susevenv-salt-minionmanager client tools 123006.0-3.46.2fixed
Susesaltlinux enterprise high performance computing 15 sp1-ltss3006.0-150100.112.1fixed
Susesaltlinux enterprise server 15 sp1-ltss3006.0-150100.112.1fixed
Susesaltlinux enterprise server for sap applications 15 sp13006.0-150100.112.1fixed
Suserelease-notes-susemanager-proxymanager proxy 4.34.3.9-150400.3.69.1fixed
Suserelease-notes-susemanagermanager server 4.34.3.9-150400.3.90.1fixed
Susesaltlinux enterprise micro 5.33006.0-150400.8.49.2fixed
Susesaltlinux enterprise micro 5.43006.0-150400.8.49.2fixed
Susesaltlinux enterprise module for basesystem 15 sp43006.0-150400.8.49.2fixed
Susesaltlinux enterprise module for server applications 15 sp43006.0-150400.8.49.2fixed
Susesaltlinux enterprise module for transactional server 15 sp43006.0-150400.8.49.2fixed
Opensusesaltleap micro 5.33006.0-150400.8.49.2fixed
Opensusesaltleap micro 5.43006.0-150400.8.49.2fixed
Opensusesaltleap 15.43006.0-150400.8.49.2fixed
Susesaltlinux enterprise micro 5.53006.0-150500.4.24.2fixed
Susesaltlinux enterprise module for basesystem 15 sp53006.0-150500.4.24.2fixed
Susesaltlinux enterprise module for server applications 15 sp53006.0-150500.4.24.2fixed
Susesaltlinux enterprise module for transactional server 15 sp53006.0-150500.4.24.2fixed
Opensusesaltleap 15.53006.0-150500.4.24.2fixed
Susepython-simplejsonlinux enterprise micro 5.33.17.2-150300.3.4.1fixed
Susepython-simplejsonlinux enterprise micro 5.43.17.2-150300.3.4.1fixed
Susepython-simplejsonlinux enterprise micro 5.53.17.2-150300.3.4.1fixed
Susepython-simplejsonlinux enterprise module for basesystem 15 sp43.17.2-150300.3.4.1fixed
Susepython-simplejsonlinux enterprise module for basesystem 15 sp53.17.2-150300.3.4.1fixed
Susepython-simplejsonlinux enterprise high performance computing 15 sp3-espos3.17.2-150300.3.4.1fixed
Susesaltlinux enterprise high performance computing 15 sp3-espos3006.0-150300.53.65.2fixed
Susepython-simplejsonlinux enterprise high performance computing 15 sp3-ltss3.17.2-150300.3.4.1fixed
Susesaltlinux enterprise high performance computing 15 sp3-ltss3006.0-150300.53.65.2fixed
Susepython-simplejsonlinux enterprise server 15 sp3-ltss3.17.2-150300.3.4.1fixed
Susesaltlinux enterprise server 15 sp3-ltss3006.0-150300.53.65.2fixed
Susepython-simplejsonlinux enterprise server for sap applications 15 sp33.17.2-150300.3.4.1fixed
Susesaltlinux enterprise server for sap applications 15 sp33006.0-150300.53.65.2fixed
Susepython-simplejsonlinux enterprise micro 5.13.17.2-150300.3.4.1fixed
Susesaltlinux enterprise micro 5.13006.0-150300.53.65.2fixed
Susepython-simplejsonlinux enterprise micro 5.23.17.2-150300.3.4.1fixed
Susesaltlinux enterprise micro 5.23006.0-150300.53.65.2fixed
Susepython-simplejsonenterprise storage 7.13.17.2-150300.3.4.1fixed
Susesaltenterprise storage 7.13006.0-150300.53.65.2fixed
Opensusepython-simplejsonleap micro 5.33.17.2-150300.3.4.1fixed
Opensusepython-simplejsonleap micro 5.43.17.2-150300.3.4.1fixed
Opensusepython-simplejsonleap 15.43.17.2-150300.3.4.1fixed
Opensusepython-simplejsonleap 15.53.17.2-150300.3.4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susevenv-salt-minionrpmmanager client tools for rhel, liberty and clones 9-client-tools3006.0-1.30.3Not reportedSUSE-EL-9-CLIENT-TOOLS-2023-4757Not reported
Susesaltbundle-swigrpmel-94.1.1-1.9.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-appdirsrpmel-91.4.4-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-certifirpmel-92018.1.18-1.9.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-cffirpmel-91.15.1-1.9.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-dateutilrpmel-92.8.1-1.3.4Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-editablesrpmel-90.3-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-exceptiongrouprpmel-91.1.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-exceptiongroup-testrpmel-91.1.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-flit-corerpmel-93.8.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-flit-scmrpmel-91.7.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-hatch-vcsrpmel-90.3.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-hatch-vcs-testrpmel-90.3.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-hatchlingrpmel-91.13.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-iniconfigrpmel-92.0.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-iniconfig-testrpmel-92.0.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-lxmlrpmel-94.9.3-1.12.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-more-itertoolsrpmel-98.10.0-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-packagingrpmel-923.1-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-pathspecrpmel-90.11.1-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-piprpmel-920.2.4-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-pluggyrpmel-91.0.0-1.6.4Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-pluggy-testrpmel-91.0.0-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-pyrpmel-91.10.0-1.9.4Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-pytestrpmel-97.3.2-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-setuptools-scmrpmel-97.1.0-1.6.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-tomlirpmel-91.2.3-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-typing-extensionsrpmel-94.5.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-typing-extensions-testrpmel-94.5.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-wheelrpmel-90.40.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltbundlepy-wheel-testrpmel-90.40.0-1.3.1Not reportedSUSE-SU-2023:4757-1Not reported
Susevenv-salt-minionrpmel-93006.0-1.30.3Not reportedSUSE-SU-2023:4757-1Not reported
Susevenv-salt-minionrpmmanager client tools for rhel, liberty and clones 9-client-tools3006.0-1.30.3Not reportedSUSE-SU-2023:4757-1Not reported
Susesaltrpmlinux enterprise high performance computing 15 sp2-ltss3006.0-150200.113.1Not reportedSUSE-SU-2023:4389-1Not reported
Susesaltrpmlinux enterprise server 15 sp2-ltss3006.0-150200.113.1Not reportedSUSE-SU-2023:4389-1Not reported
Susesaltrpmlinux enterprise server for sap applications 15 sp23006.0-150200.113.1Not reportedSUSE-SU-2023:4389-1Not reported
Susevenv-salt-minionrpmmanager client tools 153006.0-150000.3.48.2Not reportedSUSE-SU-2023:4749-1Not reported
Susevenv-salt-minionrpmmanager client tools for sle micro 53006.0-150000.3.48.2Not reportedSUSE-SU-2023:4749-1Not reported
Susevenv-salt-minionrpmmanager proxy module 4.33006.0-150000.3.48.2Not reportedSUSE-SU-2023:4749-1Not reported
Susevenv-salt-minionrpmmanager server module 4.33006.0-150000.3.48.2Not reportedSUSE-SU-2023:4749-1Not reported
Susevenv-salt-minionrpmmanager client tools 123006.0-3.46.2Not reportedSUSE-SU-2023:4748-1Not reported
Susesaltrpmlinux enterprise high performance computing 15 sp1-ltss3006.0-150100.112.1Not reportedSUSE-SU-2023:4390-1Not reported
Susesaltrpmlinux enterprise server 15 sp1-ltss3006.0-150100.112.1Not reportedSUSE-SU-2023:4390-1Not reported
Susesaltrpmlinux enterprise server for sap applications 15 sp13006.0-150100.112.1Not reportedSUSE-SU-2023:4390-1Not reported
Suserelease-notes-susemanager-proxyrpmmanager proxy 4.34.3.9-150400.3.69.1Not reportedSUSE-SU-2023:4412-1Not reported
Suserelease-notes-susemanagerrpmmanager server 4.34.3.9-150400.3.90.1Not reportedSUSE-SU-2023:4412-1Not reported
Susesaltrpmlinux enterprise micro 5.33006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Susesaltrpmlinux enterprise micro 5.43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Susesaltrpmlinux enterprise module for basesystem 15 sp43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Susesaltrpmlinux enterprise module for server applications 15 sp43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Susesaltrpmlinux enterprise module for transactional server 15 sp43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Opensusesaltrpmleap micro 5.33006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Opensusesaltrpmleap micro 5.43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Opensusesaltrpmleap 15.43006.0-150400.8.49.2Not reportedSUSE-SU-2023:4387-1Not reported
Susesaltrpmlinux enterprise micro 5.53006.0-150500.4.24.2Not reportedSUSE-SU-2023:4386-1Not reported
Susesaltrpmlinux enterprise module for basesystem 15 sp53006.0-150500.4.24.2Not reportedSUSE-SU-2023:4386-1Not reported
Susesaltrpmlinux enterprise module for server applications 15 sp53006.0-150500.4.24.2Not reportedSUSE-SU-2023:4386-1Not reported
Susesaltrpmlinux enterprise module for transactional server 15 sp53006.0-150500.4.24.2Not reportedSUSE-SU-2023:4386-1Not reported
Opensusesaltrpmleap 15.53006.0-150500.4.24.2Not reportedSUSE-SU-2023:4386-1Not reported
Susepython-simplejsonrpmlinux enterprise micro 5.33.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise micro 5.43.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise micro 5.53.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise module for basesystem 15 sp43.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise module for basesystem 15 sp53.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise high performance computing 15 sp3-espos3.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise high performance computing 15 sp3-espos3006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise high performance computing 15 sp3-ltss3.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise high performance computing 15 sp3-ltss3006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise server 15 sp3-ltss3.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise server 15 sp3-ltss3006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise server for sap applications 15 sp33.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise server for sap applications 15 sp33006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise micro 5.13.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise micro 5.13006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmlinux enterprise micro 5.23.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmlinux enterprise micro 5.23006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Susepython-simplejsonrpmenterprise storage 7.13.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Susesaltrpmenterprise storage 7.13006.0-150300.53.65.2Not reportedSUSE-SU-2023:4388-1Not reported
Opensusepython-simplejsonrpmleap micro 5.33.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Opensusepython-simplejsonrpmleap micro 5.43.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Opensusepython-simplejsonrpmleap 15.43.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported
Opensusepython-simplejsonrpmleap 15.53.17.2-150300.3.4.1Not reportedSUSE-SU-2023:4388-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References