Salt security advisory release - 2025-NOV-20

Salt Project Community Members!

The Salt Project is announcing the Salt 3006.17 LTS and 3007.9 STS CVE releases. This release addresses 2 CVEs, ranging from low to medium in severity.

To download and install the latest versions of Salt, see the Salt install guide .

For more details on the Salt 3006.17 LTS release:

• Release notes: https://docs.saltproject.io/en/3006/topics/releases/3006.17.html
• Changelogs: https://github.com/saltstack/salt/blob/3006.x/CHANGELOG.md

For more details on the Salt 3007.9 STS release:

• Release notes: https://docs.saltproject.io/en/3007/topics/releases/3007.9.html
• Changelogs: https://github.com/saltstack/salt/blob/3007.x/CHANGELOG.md

Directory repository locations:

• Salt Project Repository: Linux (RPM) : Where Salt rpm packages are officially stored and distributed.
• Salt Project Repository: Linux (DEB) : Where Salt deb packages are officially stored and distributed.
• Salt Project Repository: GENERIC : Where Salt Windows, macOS, etc. (non-rpm, non-deb) packages are officially stored and distributed.
• Best-effort supported versions of Salt (non-relenv) are also available on PyPI: https://pypi.org/project/salt/

Thank you all for your contributions!

– Salt Project Team