Skip to content
OpenAdvisories
High DLA-2823-1 1 CVE

salt - security update

Published Nov 19, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 salt 2016.11.2+ds-1+deb9u8

Vulnerabilities 1

  • High 7.5

    Exposure of Resource to Wrong Sphere in salt

    An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.