The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Oct 1, 2024 | Sep 8, 2021 |
| Debian | — | Upgrade salt | Nov 29, 2021 | Sep 8, 2021 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Nov 1, 2023 | Sep 8, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Suse | — | Upgrade python2-saltUpgrade salt-transactional-updateUpgrade saltUpgrade python2-spacewalk-client-setupUpgrade python2-spacewalk-checkUpgrade salt-proxyUpgrade spacewalk-client-toolsUpgrade spacewalk-checkUpgrade salt-fish-completionUpgrade spacecmdUpgrade salt-bash-completionUpgrade salt-docUpgrade salt-minionUpgrade python2-spacewalk-client-toolsUpgrade spacewalk-client-setupUpgrade salt-cloudUpgrade salt-standalone-formulas-configurationUpgrade salt-apiUpgrade salt-sshUpgrade salt-masterUpgrade python3-saltUpgrade salt-syndicUpgrade salt-zsh-completion | Oct 29, 2021 | Sep 8, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub