saltproject-2022-03-28-advisory: Salt security advisory release - 2022-MAR-28

Published Mar 28, 2022
·
Updated

The Salt Project released a security update to Salt to address 4 vulnerabilities with a severity rating of Medium to High. We strongly recommend prioritizing this update. This is a security advisory release. The following CVEs were fixed as part of this release:

Affected Software

1 affected componentFixes available
SaltStack Salt<3004.1, <3003.4, <3002.8
3004.13003.43002.8

Event History

Mar 28, 2022
Advisory Published
via Salt Project·12:00 AM
Data Sourced
via Salt Project·12:00 AM
Description
Feb 26, 2025
Advisory Published
via Salt Project·10:22 PM

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of saltproject-2022-03-28-advisory?

The severity of saltproject-2022-03-28-advisory ranges from Medium to High.

2

How do I fix saltproject-2022-03-28-advisory?

To fix saltproject-2022-03-28-advisory, update Salt to versions 3004.1, 3003.4, or 3002.8.

3

What vulnerabilities are addressed in saltproject-2022-03-28-advisory?

saltproject-2022-03-28-advisory addresses four vulnerabilities identified in previous versions of Salt.

4

Who is affected by saltproject-2022-03-28-advisory?

Salt users running versions earlier than 3004.1, 3003.4, and 3002.8 are affected by saltproject-2022-03-28-advisory.

5

When was the saltproject-2022-03-28-advisory released?

The saltproject-2022-03-28-advisory was released on March 28, 2022.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203