Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-22934

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-2q4g-wfm6-5fpm

SaltStack Improper Verification of Cryptographic Signature An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.

gitlab/pypi/salt/CVE-2022-22934

SaltStack Improper Verification of Cryptographic Signature An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.

pypa/salt/PYSEC-2022-171

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.

pysec/PYSEC-2022-171

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.