saltproject-2020-11-02-advisory: Active Salt CVE Release 2020-NOV-03
SaltStack has released a security update to Salt to address three critical vulnerabilities. We strongly recommend that you prioritize this update. This is a security release. The following CVE’s were fixed as part of this release:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3002Fixed in 3001.1, 3001.2Fixed in 3000.3, 3000.4Fixed in 2019.2.5, 2019.2.6Fixed in 2018.3.5Fixed in 2017.7.4, 2017.7.8Fixed in 2016.11.3, 2016.11.6, 2016.11.10Fixed in 2016.3.4, 2016.3.6, 2016.3.8Fixed in 2015.8.10, 2015.8.13Fixed in 3002.xFixed in 3001.xFixed in 3000.xFixed in 2019.x
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of saltproject-2020-11-02-advisory?
The severity of saltproject-2020-11-02-advisory is critical due to multiple vulnerabilities addressed in the release.
How do I fix saltproject-2020-11-02-advisory?
To fix saltproject-2020-11-02-advisory, you need to update your Salt installation to the latest version specified in the advisory.
What versions of Salt are affected by saltproject-2020-11-02-advisory?
The affected versions of Salt include various releases from 2015.8.10 to 3002.
What should I do if I cannot immediately update for saltproject-2020-11-02-advisory?
If you cannot immediately update for saltproject-2020-11-02-advisory, you should implement security measures to limit exposure and monitor systems closely.
Are there any known exploits for saltproject-2020-11-02-advisory?
Yes, there are known exploits associated with the vulnerabilities fixed in saltproject-2020-11-02-advisory.