Security Announcements

Active SaltStack CVE Release 2021-FEB-25

The Salt Project has released a security update to address 10 vulnerabilities with severity rating Medium to High. We strongly …

Read More

UPDATE 2021-FEB-25 CVE Release Time Delay

Today, 2021-FEB-25 CVE Release is on-going and we are working through tasks, but it is taking longer than expected. At …

Read More

Salt Feb 4th CVE Release Delayed

Today’s scheduled CVE Release is delayed due to a bug found late in the release cycle. This CVE Release is …

Read More

Active SaltStack CVE Announcement 01/21/2021

Several critical vulnerabilities have been discovered in Salt. These affect versions 3002 and earlier. Most of these, we expect the …

Read More

November 2020 SaltStack CVEs: CVE-2020-16846, CVE-2020-17490, CVE-2020-25592

SaltStack has released a security update to Salt to address three critical vulnerabilities. We strongly recommend that you prioritize this …

Read More

2020-OCT-30 SALTSTACK CVE – CRITICAL UPDATE

Three related critical vulnerabilities have been discovered in Salt versions 3002 and earlier. Two of these vulnerabilities are expected to …

Read More

How I Hardened My Salt Environment

I’ve worked as a systems administrator for the last 15 years with most of that time focused on Linux and …

Read More

APRIL 2020: SALTSTACK CVE – CRITICAL UPDATES

Thank you all for your continued support, collaboration and camaraderie as we work together to address these critical CVEs (CVE-2020-11651 …

Read More

CRITICAL VULNERABILITIES UPDATE: CVE-2020-11651 AND CVE-2020-11652

Last week a critical vulnerability was discovered affecting Salt Master versions 2019.2.3 and 3000.1 and earlier. SaltStack customers and Salt …

Read More