Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | salt | 2018.3.4+dfsg1-6+deb10u3 |
| Debian · 11 | salt | 3002.6+dfsg1-4+deb11u1 |
Vulnerabilities 1
-
High 7.5
Exposure of Resource to Wrong Sphere in salt
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.