tocsin

Alpine/salt: critical 9.8

An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API re

Action: Upgrade salt to 3002.5-r0 or later.

Affected

introducedfixedlast affected
2015.8.113002.5-r0-

Fixed versions

3002.5-r0

Sources

published · modified · JSON