Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39: FEDORA-2023-3eda7b85f5 Critical: Salt SSH Script Attack

fedora
Calendar Grey November 8, 2023
Dist Fedora Esm H88
Significant Fedora 39 patch tackles CVE-2023-34049 flaw concerning the salt execution framework.
Fix for CVE-2023-34049

Summary

Salt is a distributed remote execution system used to execute commands and

query data. It was developed in order to bring the best solutions found in

the world of remote execution together and make them better, faster and more

malleable. Salt accomplishes this via its ability to handle larger loads of

information, and not just dozens, but hundreds or even thousands of individual

servers, handle them quickly and through a simple and manageable interface.

Update Information:

Fix for CVE-2023-34049

Topics%20covered

Topics Covered

security advisory security issue critical Fedora remote execution salt script attack

Change Log

* Mon Oct 30 2023 Gwyn Ciesla - 3006.4-1 - 3006.4

References


[ 1 ] Bug #2246812 - salt-3006.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2246812 [ 2 ] Bug #2246982 - CVE-2023-34049 salt: allows an attacker to force Salt-SSH to run their script [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2246982

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-3eda7b85f5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: salt
Product: Fedora 39
Version: 3006.4
Release: 1.fc39
URL: https://saltproject.io/
Summary: A parallel remote execution system

Topics%20covered

Topics Covered

security advisory security issue critical Fedora remote execution salt script attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here