Alpine/salt: high 8.8
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
Action: Upgrade salt to 2016.11.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2016.11.2-r0 | - |
Fixed versions
| 2016.11.2-r0 |
Sources
published · modified · JSON