DSA-4676: -1 salt -- security update
Published May 6, 2020
·Updated
salt - security update
Other sources
Several vulnerabilities were discovered in salt, a powerful remote execution manager, which could result in retrieve of user tokens from the salt master, execution of arbitrary commands on salt minions, arbitrary directory access to authenticated users or arbitrary code execution on salt-api hosts.
Affected Software
2 affected components
debian/salt
debian/salt
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
saltto a version that resolves this vulnerability.Patch DSA-4676-1
Event History
May 6, 2020
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.