—

PYSEC-2021-318

상세

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / salt

최초 영향 버전: 0 수정 버전: 3003.3

수정 pip install --upgrade 'salt>=3003.3'

참고

https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ [ADVISORY]
https://github.com/advisories/GHSA-pf7h-h2wq-m7pg [ADVISORY]