These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.
Salt 3005.4 Release Notes¶
Version 3005.4 is a CVE security fix release for 3005.
Security¶
Fix CVE-2023-34049 by ensuring we do not use a predictable name for the script and correctly check returncode of scp command. This only impacts salt-ssh users using the pre-flight option. (cve-2023-34049)
Bump to cryptography==41.0.4 due to https://github.com/advisories/GHSA-v8gr-m533-ghj9 (#65267)
Bump to urllib3==1.26.17 or urllib3==2.0.6 due to https://github.com/advisories/GHSA-v845-jxx5-vc9f (#65334)
Bump to gitpython==3.1.37 due to https://github.com/advisories/GHSA-cwvm-v4w8-q58c (#65383)
