HIGH8.1
PYSEC-2026-748
SaltStack RSA Key Generation allows remote users to decrypt communications
Quick fix
PYSEC-2026-748 — salt: upgrade to the fixed version with the command below.
pip install --upgrade 'salt>=0.15.1'Details
SaltStack RSA Key Generation allows remote users to decrypt communications
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-2228[ADVISORY]
- https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228[WEB]
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228[WEB]
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85372[WEB]
- https://security-tracker.debian.org/tracker/CVE-2013-2228[WEB]
- http://www.openwall.com/lists/oss-security/2013/07/01/1[WEB]
- http://www.securityfocus.com/bid/60868[WEB]
- http://www.securitytracker.com/id/1028717[WEB]
- https://pypi.org/project/salt[PACKAGE]
- https://github.com/advisories/GHSA-gq26-cpq6-w85r[ADVISORY]