saltproject-2022-06-21-advisory: Salt security advisory release - 2022-JUNE-21

Published Jun 21, 2022
·
Updated

The Salt Project released a security update to Salt to address 1 vulnerability with severity rating High. If you are using PAM authentication from within Salt, we strongly recommend prioritizing this update. This is a security advisory release. This release includes fixes to the vulnerability and bug fixes from the previous CVE release. The following CVE was fixed as part of this release:

Affected Software

1 affected component
SaltStack Salt

Event History

Jun 21, 2022
Advisory Published
via Salt Project·12:00 AM
Data Sourced
via Salt Project·12:00 AM
Description
Feb 26, 2025
Advisory Published
via Salt Project·10:22 PM

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of saltproject-2022-06-21-advisory?

The severity of saltproject-2022-06-21-advisory is rated as High.

2

How do I fix saltproject-2022-06-21-advisory?

To fix saltproject-2022-06-21-advisory, update to the latest version of Salt as recommended in the advisory.

3

What types of systems are affected by saltproject-2022-06-21-advisory?

The systems affected by saltproject-2022-06-21-advisory are those using Salt with PAM authentication.

4

Is there a workaround for saltproject-2022-06-21-advisory?

There is no documented workaround for saltproject-2022-06-21-advisory; updating is the recommended action.

5

When was the saltproject-2022-06-21-advisory released?

The saltproject-2022-06-21-advisory was released on June 21, 2022.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203