tocsin

Alpine/salt: critical 9.8

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).

Action: Upgrade salt to 2018.3.3-r0 or later.

Affected

introducedfixedlast affected
2018.3.02018.3.3-r0-

Fixed versions

2018.3.3-r0

Sources

published · modified · JSON