ROS-20240412-04

A vulnerability in Salt’s configuration management and remote execution system is related to the
copying a script along a predictable path. Exploitation of the vulnerability could allow an attacker,
acting remotely to run their own script.

A vulnerability in the symbolic.py component of the Python library for interacting with GitPython git repositories
is related to a flaw in the directory path name restriction. Exploitation of the vulnerability could allow
an attacker acting remotely to gain unauthorized access to protected information or to cause a denial of service.
cause a denial of service

Vulnerability in the urllib3 module of the Python programming language interpreter is related to the lack of protection of service data.
of service data. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or cause a denial of service.
protected information