[Pkg-salt-team] Salt status in Debian.

[Thomas Martin]

Hi Team,

I'm currently working on a project to orchestrate workstations and I
think that SaltStack is the most relevant solution for me.

But I'm having concerns about the lack of security updates of Salt in
Debian Stable and oldstable, support seems discontinued.
For example this CVE is still affecting Debian's versions :
https://security-tracker.debian.org/tracker/CVE-2022-22934

Due to the nature of Salt, security seems *very* important so I'm a
bit confused about the lack of Salt's updates in Stable and OldStable.
Should I contact the security team ?

Would you advise to go for another solution packaged by Debian (like
Puppet or Chef) or to use the official Salt repository
(https://repo.saltproject.io/#debian) ?

Let me know if I can help.

Regards,
Thomas