portage-ng / portage / app-admin / salt / 3007.12
portage-ng glsa
4 advisories reference app-admin/salt · none place version 3007.12 in a vulnerable range
▸ GLSA 202412-09 Salt: Multiple Vulnerabilities this version unaffected normal remote 2024-12-07

Multiple vulnerabilities have been discovered in Salt, the worst of which can lead to arbitrary code execution.

Announced
2024-12-07
Revised
2024-12-07
Access
remote
Bugs
#916512 #925021
Advisory
https://security.gentoo.org/glsa/202412-09

Affected packages

PackageArchVulnerableUnaffected
app-admin/salt*< 3006.6>= 3006.6

Background

Salt is a fast, intelligent and scalable automation engine.

Description

Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Salt users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/salt-3006.6"

References

▸ GLSA 202310-22 Salt: Multiple Vulnerabilities this version unaffected high local and remote 2023-10-31

Multiple vulnerabilities have been discovered in Salt, the worst of which could result in local privilege escalation.

Announced
2023-10-31
Revised
2023-10-31
Access
local and remote
Bugs
#767919 #812440 #836365 #855962
Advisory
https://security.gentoo.org/glsa/202310-22

Affected packages

PackageArchVulnerableUnaffected
app-admin/salt*< 3004.2>= 3004.2

Background

Salt is a fast, intelligent and scalable automation engine.

Description

Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Salt users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/salt-3004.2"

References

▸ GLSA 202103-01 Salt: Multiple vulnerabilities this version unaffected normal local, remote 2021-03-31

Multiple vulnerabilities have been found in Salt, the worst of which could allow remote attacker to execute arbitrary commands.

Announced
2021-03-31
Revised
2021-03-31
Access
local, remote
Bugs
#767919
Advisory
https://security.gentoo.org/glsa/202103-01

Affected packages

PackageArchVulnerableUnaffected
app-admin/salt*< 3000.8>= 3000.8

Background

Salt is a fast, intelligent and scalable automation engine.

Description

Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary commands via salt-api, cause a Denial of Service condition, bypass access restrictions or disclose sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All Salt users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/salt-3000.8"

References

▸ GLSA 202011-13 Salt: Multiple vulnerabilities this version unaffected normal remote 2020-11-11

Multiple vulnerabilities have been found in Salt, the worst of which could result in the arbitrary execution of code.

Announced
2020-11-11
Revised
2020-11-11
Access
remote
Bugs
#753266
Advisory
https://security.gentoo.org/glsa/202011-13

Affected packages

PackageArchVulnerableUnaffected
app-admin/salt*< 3000.5>= 3000.5

Background

Salt is a remote execution and configuration manager.

Description

Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Salt users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/salt-3000.5"

References