Alpine/salt: critical 9.1

An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.

Action: Upgrade salt to 3002.5-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-25282
• https://security.alpinelinux.org/vuln/CVE-2021-25282

published 2021-02-27T05:15:13.910Z · modified 2026-11-03T06:32:32.112769319Z · JSON