saltproject-2022-03-22-advisory: ATTENTION! Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier
Dear Salt users and Salt Project Community members, Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier. The vulnerabilities range in rating from Medium to High based on the Common Vulnerability Scoring System (CVSS). We are preparing a CVE release to be available on Monday, March 28th. The CVE packages will be available for 3002.8, 3003.4, and 3004.1. The releases will only contain the fixes available to resolve and remediate the identified vulnerabilities. We advise all users to quickly apply the CVE release as soon as the packages are available. Please reach out if you have any questions or comments. You can reach us at saltproject-security.pdl@broadcom.com. Thank you, Your Salt Open Core team
Affected Software
Event History
Frequently Asked Questions
What is the severity of saltproject-2022-03-22-advisory?
The severity of saltproject-2022-03-22-advisory ranges from Medium to High based on the Common Vulnerability Scoring System (CVSS).
How do I fix saltproject-2022-03-22-advisory?
To fix saltproject-2022-03-22-advisory, upgrade your Salt installation to a version later than 3004.
Which versions of Salt are affected by saltproject-2022-03-22-advisory?
Salt versions 3004 and earlier are affected by saltproject-2022-03-22-advisory.
What vulnerabilities are addressed in saltproject-2022-03-22-advisory?
Saltproject-2022-03-22-advisory addresses several critical vulnerabilities found in the affected Salt versions.
Who can I contact for more information regarding saltproject-2022-03-22-advisory?
For more information regarding saltproject-2022-03-22-advisory, you can reach out to the Salt Project Community.