CVE catalog

CVE-2024-22231

Security update for salt

[CVE catalog]

This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (bsc#1219431) - Convert oscap output to UTF-8 - Make Salt compatible with Python 3.11 - Ignore non-ascii chars in oscap output (bsc#1219001) - Fix detected issues in Salt tests when running on VMs - Make importing seco.range thread safe (bsc#1211649) - Fix problematic tests and allow smooth tests executions on containers - Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888) - Prevent exceptions with fileserver.update when called via state (bsc#1218482) - Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850) - Fixed KeyError in logs when running a state that fails

Severity
Medium · CVSS 5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.69% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntuprosalt2016.11.5+ds-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2016.11.8+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.2+dfsg1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.3+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.2+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Susemanager server module 4.3venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]
Susemanager server 4.3release-notes-susemanager4.3.11-150400.3.100.1UnknownSource applicability is not established[SUSE-SU-2024:0513-1]
Susemanager server 4.3salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Susemanager proxy module 4.3venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]

Showing 12 observations. All 54 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Opensuseleap 15.5salt3006.0-150500.4.29.1UnknownSource applicability is not established[SUSE-SU-2024:0510-1]
Opensuseleap micro 5.3salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Opensuseleap micro 5.4salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suseel-9saltbundlepy3.10.14-1.20.1UnknownSource applicability is not established[SUSE-SU-2024:1525-1]
Suseel-9saltbundlepy-core3.10.14-1.20.1UnknownSource applicability is not established[SUSE-SU-2024:1525-1]
Suseel-9saltbundlepy-lxml4.9.3-1.15.2UnknownSource applicability is not established[SUSE-SU-2024:1525-1]
Suseel-9venv-salt-minion3006.0-1.36.3UnknownSource applicability is not established[SUSE-SU-2024:1525-1]
Suseenterprise storage 7.1salt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise high performance computing 15 sp1-ltsssalt3006.0-150100.117.1UnknownSource applicability is not established[SUSE-SU-2024:0506-1]
Suselinux enterprise high performance computing 15 sp2-ltsssalt3006.0-150200.118.1UnknownSource applicability is not established[SUSE-SU-2024:0507-1]
Suselinux enterprise high performance computing 15 sp3-ltsssalt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise high performance computing 15 sp4-espossalt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suselinux enterprise high performance computing 15 sp4-ltsssalt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suselinux enterprise micro 5.1salt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise micro 5.2salt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise micro 5.3salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suselinux enterprise micro 5.4salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suselinux enterprise micro 5.5salt3006.0-150500.4.29.1UnknownSource applicability is not established[SUSE-SU-2024:0510-1]
Suselinux enterprise module for basesystem 15 sp5salt3006.0-150500.4.29.1UnknownSource applicability is not established[SUSE-SU-2024:0510-1]
Suselinux enterprise module for server applications 15 sp5salt3006.0-150500.4.29.1UnknownSource applicability is not established[SUSE-SU-2024:0510-1]
Suselinux enterprise module for transactional server 15 sp5salt3006.0-150500.4.29.1UnknownSource applicability is not established[SUSE-SU-2024:0510-1]
Suselinux enterprise server 15 sp1-ltsssalt3006.0-150100.117.1UnknownSource applicability is not established[SUSE-SU-2024:0506-1]
Suselinux enterprise server 15 sp2-ltsssalt3006.0-150200.118.1UnknownSource applicability is not established[SUSE-SU-2024:0507-1]
Suselinux enterprise server 15 sp3-ltsssalt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise server 15 sp4-ltsssalt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Suselinux enterprise server for sap applications 15 sp2salt3006.0-150200.118.1UnknownSource applicability is not established[SUSE-SU-2024:0507-1]
Suselinux enterprise server for sap applications 15 sp3salt3006.0-150300.53.70.1UnknownSource applicability is not established[SUSE-SU-2024:0508-1]
Suselinux enterprise server for sap applications 15 sp4salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Susemanager client tools 12venv-salt-minion3006.0-3.52.3UnknownSource applicability is not established[SUSE-SU-2024:1517-1]
Susemanager client tools 15venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]
Susemanager client tools for rhel, liberty and clones 9-client-toolsvenv-salt-minion3006.0-1.36.3UnknownSource applicability is not established[SUSE-EL-9-CLIENT-TOOLS-2024-1525][SUSE-SU-2024:1525-1]
Susemanager client tools for sle micro 5venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]
Susemanager proxy 4.3release-notes-susemanager-proxy4.3.11-150400.3.79.1UnknownSource applicability is not established[SUSE-SU-2024:0513-1]
Susemanager proxy 4.3salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Susemanager proxy module 4.3venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]
Susemanager server 4.3release-notes-susemanager4.3.11-150400.3.100.1UnknownSource applicability is not established[SUSE-SU-2024:0513-1]
Susemanager server 4.3salt3006.0-150400.8.54.1UnknownSource applicability is not established[SUSE-SU-2024:0509-1]
Susemanager server module 4.3venv-salt-minion3006.0-150000.3.54.3UnknownSource applicability is not established[SUSE-SU-2024:1518-1]
Ubuntu22.04salt3002.6+dfsg1-4UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3002.7+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004+dfsg1-4UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004+dfsg1-5UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004+dfsg1-6ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004+dfsg1-7UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004+dfsg1-8UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntu22.04salt3004.1+dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2016.11.5+ds-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2016.11.8+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.2+dfsg1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.3+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Ubuntuprosalt2017.7.4+dfsg1-1ubuntu18.04.2+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-22231]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-1.36.3"
            }
          ]
        }
      ],
      "release": "manager client tools for rhel, liberty and clones 9-client-tools",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-EL-9-CLIENT-TOOLS-2024-1525",
      "fixed_version": "3006.0-1.36.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-EL-9-CLIENT-TOOLS-2024-1525",
      "provider_updated_at": "2026-07-24T18:24:19.302418505Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2016.11.5+ds-1",
        "2016.11.8+dfsg1-1",
        "2017.7.2+dfsg1-2ubuntu1",
        "2017.7.3+dfsg1-1",
        "2017.7.4+dfsg1-1",
        "2017.7.4+dfsg1-1ubuntu18.04.1",
        "2017.7.4+dfsg1-1ubuntu18.04.2",
        "2017.7.4+dfsg1-1ubuntu18.04.2+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-22231",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-22231",
      "provider_updated_at": "2026-04-08T14:30:02.225942Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "3002.6+dfsg1-4",
        "3002.7+dfsg1-1",
        "3004+dfsg1-4",
        "3004+dfsg1-5",
        "3004+dfsg1-6ubuntu1",
        "3004+dfsg1-7",
        "3004+dfsg1-8",
        "3004.1+dfsg-2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-22231",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-22231",
      "provider_updated_at": "2026-04-08T14:30:02.225942Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150000.3.54.3"
            }
          ]
        }
      ],
      "release": "manager client tools 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1518-1",
      "fixed_version": "3006.0-150000.3.54.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1518-1",
      "provider_updated_at": "2026-02-04T04:34:04.462352Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150000.3.54.3"
            }
          ]
        }
      ],
      "release": "manager client tools for sle micro 5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1518-1",
      "fixed_version": "3006.0-150000.3.54.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1518-1",
      "provider_updated_at": "2026-02-04T04:34:04.462352Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150000.3.54.3"
            }
          ]
        }
      ],
      "release": "manager proxy module 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1518-1",
      "fixed_version": "3006.0-150000.3.54.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1518-1",
      "provider_updated_at": "2026-02-04T04:34:04.462352Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150000.3.54.3"
            }
          ]
        }
      ],
      "release": "manager server module 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1518-1",
      "fixed_version": "3006.0-150000.3.54.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1518-1",
      "provider_updated_at": "2026-02-04T04:34:04.462352Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150300.53.70.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0508-1",
      "fixed_version": "3006.0-150300.53.70.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0508-1",
      "provider_updated_at": "2026-02-04T04:26:51.272923Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-3.52.3"
            }
          ]
        }
      ],
      "release": "manager client tools 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1517-1",
      "fixed_version": "3006.0-3.52.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1517-1",
      "provider_updated_at": "2026-02-04T04:16:29.566734Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150500.4.29.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0510-1",
      "fixed_version": "3006.0-150500.4.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0510-1",
      "provider_updated_at": "2026-02-04T04:04:18.963763Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150500.4.29.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0510-1",
      "fixed_version": "3006.0-150500.4.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0510-1",
      "provider_updated_at": "2026-02-04T04:04:18.963763Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150500.4.29.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0510-1",
      "fixed_version": "3006.0-150500.4.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0510-1",
      "provider_updated_at": "2026-02-04T04:04:18.963763Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150500.4.29.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for transactional server 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0510-1",
      "fixed_version": "3006.0-150500.4.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0510-1",
      "provider_updated_at": "2026-02-04T04:04:18.963763Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150500.4.29.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0510-1",
      "fixed_version": "3006.0-150500.4.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0510-1",
      "provider_updated_at": "2026-02-04T04:04:18.963763Z",
      "applicability_unknown": true
    },
    {
      "name": "saltbundlepy",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.14-1.20.1"
            }
          ]
        }
      ],
      "release": "el-9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1525-1",
      "fixed_version": "3.10.14-1.20.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1525-1",
      "provider_updated_at": "2026-02-04T04:02:29.850966Z",
      "applicability_unknown": true
    },
    {
      "name": "saltbundlepy-core",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.14-1.20.1"
            }
          ]
        }
      ],
      "release": "el-9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1525-1",
      "fixed_version": "3.10.14-1.20.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1525-1",
      "provider_updated_at": "2026-02-04T04:02:29.850966Z",
      "applicability_unknown": true
    },
    {
      "name": "saltbundlepy-lxml",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.9.3-1.15.2"
            }
          ]
        }
      ],
      "release": "el-9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1525-1",
      "fixed_version": "4.9.3-1.15.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1525-1",
      "provider_updated_at": "2026-02-04T04:02:29.850966Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-1.36.3"
            }
          ]
        }
      ],
      "release": "el-9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1525-1",
      "fixed_version": "3006.0-1.36.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1525-1",
      "provider_updated_at": "2026-02-04T04:02:29.850966Z",
      "applicability_unknown": true
    },
    {
      "name": "venv-salt-minion",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-1.36.3"
            }
          ]
        }
      ],
      "release": "manager client tools for rhel, liberty and clones 9-client-tools",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1525-1",
      "fixed_version": "3006.0-1.36.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1525-1",
      "provider_updated_at": "2026-02-04T04:02:29.850966Z",
      "applicability_unknown": true
    },
    {
      "name": "release-notes-susemanager-proxy",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.11-150400.3.79.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0513-1",
      "fixed_version": "4.3.11-150400.3.79.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0513-1",
      "provider_updated_at": "2026-02-04T03:55:28.738980Z",
      "applicability_unknown": true
    },
    {
      "name": "release-notes-susemanager",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.11-150400.3.100.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0513-1",
      "fixed_version": "4.3.11-150400.3.100.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0513-1",
      "provider_updated_at": "2026-02-04T03:55:28.738980Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150100.117.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0506-1",
      "fixed_version": "3006.0-150100.117.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0506-1",
      "provider_updated_at": "2026-02-04T03:47:33.602035Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150100.117.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0506-1",
      "fixed_version": "3006.0-150100.117.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0506-1",
      "provider_updated_at": "2026-02-04T03:47:33.602035Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150200.118.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0507-1",
      "fixed_version": "3006.0-150200.118.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0507-1",
      "provider_updated_at": "2026-02-04T02:46:13.896080Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150200.118.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0507-1",
      "fixed_version": "3006.0-150200.118.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0507-1",
      "provider_updated_at": "2026-02-04T02:46:13.896080Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150200.118.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0507-1",
      "fixed_version": "3006.0-150200.118.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0507-1",
      "provider_updated_at": "2026-02-04T02:46:13.896080Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    },
    {
      "name": "salt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3006.0-150400.8.54.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0509-1",
      "fixed_version": "3006.0-150400.8.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0509-1",
      "provider_updated_at": "2025-05-02T04:36:26.159172Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]