tocsin

Alpine/salt: high 7.8

In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is creat

Action: Upgrade salt to 3003-r0 or later.

Affected

introducedfixedlast affected
2016.93003-r0-

Fixed versions

3003-r0

Sources

published · modified · JSON