saltproject-2021-02-25-advisory-02: Active Salt CVE Release 2021-FEB-25
The Salt Project has released a security update to address 10 vulnerabilities with severity rating Medium to High. We strongly recommend prioritizing this update. This is a security release. In the recent past, we have gone above and beyond our lifecycle policy in good faith to fix critical issues in versions no longer supported. Going forward, this will be the exception and not standard practice. We will follow our stated lifecycle policy found on the Salt Project Lifecycle Support page. The following CVEs were fixed as part of this release:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of saltproject-2021-02-25-advisory-02?
The severity of saltproject-2021-02-25-advisory-02 ranges from Medium to High.
How do I fix saltproject-2021-02-25-advisory-02?
To fix saltproject-2021-02-25-advisory-02, update to the latest versions of Salt listed in the advisory.
What versions of Salt are affected by saltproject-2021-02-25-advisory-02?
The affected versions of Salt include 3002.2, 3001.4, 3000.6, 2019.2.x, 2018.3.5, and several earlier versions.
Is it mandatory to update for saltproject-2021-02-25-advisory-02?
Yes, it is strongly recommended to prioritize the update as it addresses multiple vulnerabilities.
What vulnerabilities are addressed in saltproject-2021-02-25-advisory-02?
saltproject-2021-02-25-advisory-02 addresses a total of 10 vulnerabilities classified with Medium to High severity.