The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Oct 1, 2024 | Sep 8, 2021 |
| Debian | — | Upgrade salt | Nov 29, 2021 | Sep 8, 2021 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Nov 1, 2023 | Sep 8, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Suse | — | Upgrade salt-docUpgrade spacecmdUpgrade spacewalk-client-toolsUpgrade salt-proxyUpgrade salt-transactional-updateUpgrade salt-bash-completionUpgrade spacewalk-checkUpgrade python2-saltUpgrade python2-spacewalk-checkUpgrade salt-fish-completionUpgrade saltUpgrade python2-spacewalk-client-setupUpgrade salt-minionUpgrade python2-spacewalk-client-toolsUpgrade salt-sshUpgrade python3-saltUpgrade salt-masterUpgrade salt-syndicUpgrade spacewalk-client-setupUpgrade salt-apiUpgrade salt-standalone-formulas-configurationUpgrade salt-zsh-completionUpgrade salt-cloud | Oct 29, 2021 | Sep 8, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub