saltproject-2025-11-20-advisory-3006-17-3007-9: Salt security advisory release - 2025-NOV-20
Published Nov 20, 2025
·Updated
Salt Project Community Members! The Salt Project is announcing the Salt 3006.17 LTS and 3007.9 STS CVE releases. This release addresses 2 CVEs, ranging from low to medium in severity. To download and install the latest versions of Salt, see the Salt install guide . For more details on the Salt 3006.17 LTS release: For more details on the Salt 3007.9 STS release: Directory repository locations: Thank you all for your contributions! – Salt Project Team
Affected Software
2 affected components
Salt Project Salt
SaltStack Salt
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Saltto a version that resolves this vulnerability.Fixed in 3006.17 - Upgrade
Upgrade
Saltto a version that resolves this vulnerability.Fixed in 3007.9
Event History
Nov 20, 2025
Advisory Published
via Salt Project·12:00 AM
Data Sourced
via Salt Project·12:00 AM
DescriptionAffected Software