The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Aug 22, 2024 | Mar 29, 2022 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Nov 1, 2023 | Mar 29, 2022 |
| Suse | — | Upgrade salt-proxyUpgrade salt-syndicUpgrade salt-zsh-completionUpgrade salt-standalone-formulas-configurationUpgrade salt-fish-completionUpgrade salt-sshUpgrade python3-saltUpgrade python2-saltUpgrade salt-minionUpgrade salt-transactional-updateUpgrade salt-docUpgrade salt-apiUpgrade salt-bash-completionUpgrade salt-cloudUpgrade salt-masterUpgrade salt | Oct 26, 2022 | Mar 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub